GHSA-pr46-2v3c-5356

The RSGI static handler for Emmett's internal assets (/__emmett__ paths) is vulnerable to path traversal attacks.

An attacker can use ../ sequences (eg /__emmett__/../rsgi/handlers.py) to read arbitrary files outside the assets directory.