NULL Byte Injection

Ruby is vulnerable to NULL byte injection vulnerability. This is because the UNIXSocket::open and UNIXServer::open ruby methods do not handle the NULL byte properly. An attacker could make and accept the socket file in the unintentional path if a script accepts an external input as the argument of these methods.