Arbitrary file write via unsanitized attachment filename

Path traversal in the eml_parser example script before 2.0.1 allows attackers to write files via crafted attachment filenames. The script joins each untrusted attachment filename directly to the output path, then opens the resulting path for binary writing without normalization or a boundary check. An operator must process an attacker-supplied EML with the example script, and writes remain limited to filesystem locations permitted to that process.