Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
S3Scanner allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.
Advisories for Pypi/S3Scanner package
2021