An arbitrary file upload vulnerability in tduck-platform v4.0 allows malicious users to execute arbitrary code via a crafted HTML file.
tduckcloud tduck-platform 4.0