Path Traversal

ubi-reader is vulnerable to path traversal. The vulnerability exists in the extract_dents function in output.py, allowing an attacker to overwrite files outside of the extraction directory through the URL path such as `…/…/tmp/outside.txt