AIKIDO-2026-10124

TL;DR

Affected versions of this package are vulnerable to path traversal when processing nested rule files, due to insufficient validation of relative file paths. An attacker could craft paths containing traversal sequences to access files outside the intended directory. The patched version adds explicit path traversal checks after path resolution, ensuring that rule files remain within the expected root directory and preventing unauthorized file access.