CodeVetter · local evidence export

Path traversal in a Python file handler

codevetter-public-benchmark/py-path-traversal

needs review · medium confidence

Verification

Code reviewcompleted

Qualified static finding recorded.

Executable testnot verified

No exact-current runtime evidence is included.

Audiencenot run

No audience validation occurred.

highbenchmark ground truth

The requested filename is joined to the storage root without canonical containment validation.

source.py:9