Nginx API Endpoint Path Traversal Vulnerability

Certain versions of Nginx before 0.31.0 have a vulnerability in the /api/opencode proxy endpoint.

Nginx fails to properly validate the 'x-opencode-directory' request header, allowing remote attackers to supply arbitrary directory paths.

This can result in file operations being executed outside the project root on the host system.