In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
CWE-35, CWE-22