A vulnerability in cap-primitives allows paths or symlinks ending with a slash to bypass sandbox restrictions. The resolver incorrectly re-adds a trailing slash before opening the last path component, causing the operating system to follow symlinks outside the sandbox. This affects operations like open, directory creation, removal, and renames outside the sandbox. The issue impacts cap-primitives versions before 3.4.6 and versions 4.0.0 up to but not including 4.0.3. A fix is available in versions 3.4.6 and 4.0.3.