bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.