The fact
The flaw allows an attacker to access files outside the intended directory during package installation.
This vulnerability was analyzed and documented on April 9, 2026 on the Vigilance.fr platform.
Click the link to read an article on the topic: