input-leap Input Leap

• CVE-2026-100230 Medium 5.3 Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with result 0.7%