GHSA-29gr-w57f-rpfw actionpack vulnerable to Path Traversal

• RubyGems actionpack: >= 3.0.0, < 3.2.20 → fixed in 3.2.20 • RubyGems actionpack: >= 4.0.0, < 4.0.11 → fixed in 4.0.11 • RubyGems actionpack: >= 4.1.0, < 4.1.7 → fixed in 4.1.7 • RubyGems actionpack: >= 4.2.0.beta1, < 4.2.0.beta3 → fixed in 4.2.0.beta3

Directory traversal vulnerability in `actionpack/lib/action_dispatch/middleware/static.rb` in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when `serve_static_assets` is enabled, allows remote attackers to determine the existence of files outside the application root via a `/..%2F` sequence.