rjarry aerc

• CVE-2025-49466 Medium 5.8 aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part, 0.6%