github_osv/GHSA-c8f7-x2g7-7fxj
Phoenix-ws source code and data in extensions folder is publicly available
### Impact
All of the source code, files, and folders in `phoenix_files/extensions/` are available to end users through a simple HTTP GET request.
### Patches
The issue has been patched. The users of version 1.0.6 and above are not effected.
gitlab/pypi/phoenix-ws/GMS-2022-1729
Information Disclosure
All of the source code, files, and folders in `phoenix_files/extensions/` are available to end users through a simple HTTP GET request.