> #Path Traversal

JWT key selection via a path-traversal kid reads a static file and forges an editor token.

A filtered path traversal bypass turns a local file inclusion bug into a flag read.

Double URL encoding bypasses an absolute-path filter and enables local file read.

Path traversal in the mod build flow writes a Python codec payload and reaches server-side code execution.