2025-06-05 00:00:00
mitre
PUBLISHED
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,