CVE-2024-8019: PyTorch Lightning path traversal vulnerability

The vulnerability explicitly occurs in the file upload endpoint handler. The key failure is insufficient validation of user-controlled filename parameters when writing files. Though the exact code isn't shown, the advisory's description of crafted filenames leading to arbitrary writes matches classic path traversal vulnerabilities in file upload handlers. The Windows-specific context suggests improper handling of path separators. The first patched version removed LightningApp code (commit 330af38), implying the vulnerable logic resided in the app component's file upload handling.