Merge pull request #1501 from 3clyp50/fileabsCVE

fix(api): block path traversal in download_work_dir_file (CVE-2026-4307)

Alessandro committed Apr 12, 2026 at 17:24 UTC 2b1ff5e798612b173e9a385a17bf212bdc37eed9

No changes.