Launchpad.net

CVE 2021-23514

This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server.

See the CVE page on Mitre.org for more details.