RootCauseunvalidated
safer_name_suffix() runs before strip_name_components, so path traversal introduced by stripping is never re-validated.
559f759d-007d-43b8-92c2-2fbeb0ef226f
safer_name_suffix() runs before strip_name_components, so path traversal introduced by stripping is never re-validated.