The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.CreditsMoritz Oehrlein (m1tz)Referenceshttps://github.com/RedHatProductSecurity/osim/pull/615