From Dev.to
Safe archive extraction must validate the final path
Safe archive extraction must validate the final path Archive extraction looks like a file operation until an archive contains a member named ../../etc/file, an absolute path, or a symbolic link that...