#866 Potential path traversal found by codex security plugin Pull request opened by javuto Environment package fields are stored as arbitrary strings and later joined into

packages/<env>/<stored>

by the public enroll package download handler. A traversal value in a non-HTTPS package field can make

osctrl-tls

stream a process-readable file relative to its working directory to anyone with the environment package link secret. jmpsec/osctrl