Description
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
rjarry aerc
Default version status: unaffected
0 to < 93bec0de8ed5ab3d6b1f01026fe2ef20fa154329affected