wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-49089.json"