speedmax/h2o-php — Issue #40: I don't know much php but ... in loaders.php 
Author: d1b
Created: 2011-10-19 07:55:34+00:00
State: open

I don't know much php but ... in loaders.php
the class H2o_File_Cache constructor may create a directory using 'tempnam' which is not done securely(as far as I know it is not secure in php :/ ).