[MEDIUM] Trusted-Directory Bypass via Path Traversal

PKSA-thph-wfk6-pp4j CVE-2018-16831 GHSA-65j5-vpm7-6xp4

Affected package: smarty/smarty

Affected version: <3.1.33

Reported by:
GitHub, FriendsOfPHP/security-advisories