Security vulnerability affects the diffoscope package. diffoscope before 256 allows directory traversal via an embedded filename in a GPG file.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-WM30423.json"