HSEC-2026-0014 — Arbitrary file write via path traversal in unpackToDir

When extracting an archive, insufficient path validation can allow files to be written outside the destination directory. The impact depends on the privileges of the extraction process.