fig. 01 — GHSA-2q42-4q24-7rgv, the advisory selected below
// advisories
GHSA-2q42-4q24-7rgv
HIGH
The @typespec/openapi3 emitter retains the value of a @versioned enum member and interpolates it into the output filename as {version} without sanitizing path separators or traversal components. The completed path reaches the compiler's emitFile(), which creates the parent directory and writes the file without verifying containment under emitterOutputDir.