WS-2019-0149

there is a path traversal vulnerability in ponse versions before 2.0.2 since the package fails to sanitize URLs...