CVE-2022-31550: Improper Limitation of a Pathname to a Restricted Directory

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...