A vulnerability marked as critical has been reported in allure-framework allure2 up to 2.37.x. This issue affects some unknown processing. Performing a manipulation results in path traversal.
This vulnerability is known as CVE-2026-33166. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.
