emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3293.json"