path-traversal 2 Node.js Arbitrary File Upload to RCE – AppSec Master Challenge Writeup Aug 3, 2025 Path Traversal in File Upload via GraphQL API Mar 11, 2025