Dosage versions prior to 3.2 are vulnerable to a directory traversal issue via crafted HTTP responses. The vulnerability arises because Dosage uses the HTTP Content-Type header to determine file extensions when downloading comic images, allowing an attacker to write files outside the intended directory. This flaw is fixed in Dosage 3.2.