CVE-2020-7772

This affects the package doc-path before 2.1.2.