AIKIDO-2026-10668

TL;DR

Affected versions of this package are vulnerable to Zip Slip / Zip Traversal attacks during archive extraction. An attacker can craft a malicious zip archive containing files with '../' or '..\' in their filenames, allowing extraction routines to write files outside the intended extraction directory. This can result in overwriting critical files or writing to restricted locations on the file system.