Directory Traversal

rubysl-tmpdir is vulnerable to directory traversal attacks.The Dir.mktmpdir method accepts a prefix which could contain a string such as ../ which would allow an attacker to create temporary directories anywhere within the server if the prefix method can be attacker controlled...