Code:  static int nntp_hcache_namer(const char *path, char *dest, size_t destlen)
 {
  return snprintf(dest, destlen, "%s.hcache", path);
 }

Vulnerability Type: Dir. Trav. 
CWE ID: CWE-22
Summary: An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
Commit Message: sanitise cache paths

Co-authored-by: JerikoOne <jeriko.one@gmx.us>