Path traversal vulnerabilities have been 'unforgivable' for decades - developers still haven't got the messageDirectory traversal flaws persist despite long-standing awareness.