Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii

@@ -171,6 +171,7 @@ public function saveAttachmentFromApi(Attachment $attachment, string $content):
         $allowedMime = config('firefly.allowedMimes');
         if (!in_array($mime, $allowedMime, true)) {
             Log::error(sprintf('Mime type %s is not allowed for API file upload.', $mime));
+            fclose($resource);
 
             return false;
         }