paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1603.json"