wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
"https://github.com/pypa/advisory-database/blob/main/vulns/moneyprinterturbo/PYSEC-2025-143.yaml"