CVE-2026-61505: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rejetto hfs

Rejetto HFS versions 3.0.0 through 3.2.0 contain a path traversal vulnerability via the lang query parameter. This flaw allows a remote unauthenticated attacker to read certain JSON files outside the…