CVE-2024-43035

Fonoster CVE-2024-43035 affects 0.5.5 prior to 0.6.1 and enables directory traversal via the VoiceServer endpoints /sounds/:file and /tts/:file. The root cause is in serveFiles within mods/voice/src/utils.ts, where local files can be read. This issue is not present in 0.6.1 and later (the functio...