[shiva] Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-31558
• https://github.com/tooxie/shiva-server/issues/189
• https://github.com/advisories/GHSA-qp72-96p2-g644