CVE-2026-102991: Python Path Traversal Guard After Drive Aware Normpathcve-2026-102991-python-path-traversal-guard-after-drive-aware-normpath
A path or URI normalized with a drive-aware path module (os.path, which is ntpath on Windows, or ntpath directly) flows into a leading-dot-dot containment check. ntpath.normpath() splits off a drive designator and absorbs the following ".." segments into the drive root (e.g. "C:/../../secret.txt" normalizes to "C:\secret.txt"), so the traversal guard is bypa
