No, this is not a security issue. localPath is based on the sha256, which is checked right above for validity.
No, this is not a security issue. localPath is based on the sha256, which is checked right above for validity.