Improper Neutralization Of Filename Or Path

github.com/schollz/croc is vulnerable to Improper Neutralization Of Filename Or Path. The vulnerability is due to a lack of filenames filtering or received from the client side. This allows an attacker to use filenames with special characters, including ANSI/CSI terminal escape sequences. The filenames without any sanitization are displayed on stdout during the transfer process which can lead to arbitrary code execution.