FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13241.json"