GHSA-5jhh-46x7-49hp: Path traversal vulnerability in Leon

Leon versions before commit 50df142 contain a path traversal vulnerability that may allow attackers to write files outside the models directory.