During archive extraction, directory entries skipped the path guard that file entries passed. Because Python's os.path.join discards every argument before an absolute component, a crafted entry could redirect extraction outside the intended destination.
Directory traversal in archive extraction (guard/sink mismatch on directory entries).
cve.org record · GitHub Security Advisory GHSA-65mm-vgrw-vqx4