Critical Information Disclosure via /talos/api/v1/files/upload

Summary

@sameer_ali discovered a vulnerability in the file upload functionality where uploaded files were first stored on the server before being sent to S3. Due to a configuration flaw, memory chunks from the server were included in some uploaded files. This issue was classified as Critical and was addressed as a priority.