On Windows, the filepath.Clean function can convert certain invalid paths to valid, absolute paths, potentially allowing a directory traversal attack.
For example, Clean(".\c:") returns "c:".
{ "imports": [ { "path": "path/filepath", "symbols": [ "Clean" ], "goos": [ "windows" ] } ] }