vulnerability in musicinformationretrieval.com project

[ankitdn]

While working on musicinformationretrieval.com project, I identified a vulnerability related to CVE-2025-66221 in the safe_join() function of Werkzeug. The function allows Windows special device names (such as CON, AUX, etc.) to pass through path validation.

CVE Link
CVE Report