Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd