CVE-2026-45617: Fallback Path Traversal Yield

A fallback file path is generated and yielded without directory bounds checking. This logic may allow path traversal if the yielded file path is accessed by the application. Ensure the directory boundary is checked before yielding the filepath.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-45617-fallback-path-traversal-yield --engine opengrep

Description

A fallback file path is generated and yielded without directory bounds checking. This logic may allow path traversal if the yielded file path is accessed by the application. Ensure the directory boundary is checked before yielding the filepath.