Threats affecting pkg:brew/redocly-cli

A path traversal vulnerability exists in Redocly CLI's `split` command that allows an attacker to cause files to be written outside the intended output directory. This occurs when processing malicious OpenAPI or AsyncAPI descriptions. The attacker’s control over file names and contents is limited, as files are emitted only as YAML/JSON and code-sample files are named after HTTP methods. The issue affects versions from 1.27.2 up to but not including 2.33.2 and is fixed in version 2.33.2.