Threats affecting pkg:pypi/emmett

A critical path traversal vulnerability (CWE-22) exists in the Emmett Python web framework versions 2.5.0 up to but not including 2.8.1. The vulnerability affects the RSGI static handler serving internal assets under the /__emmett__ path, allowing an attacker to use .. / sequences to access arbitrary files outside the intended assets directory. This can lead to unauthorized disclosure of sensitive files. The issue is fixed starting from version 2.8.