2017/10/GHSA-h56m-vwxc-3qpw Directory traversal vulnerability in actionpack