Directory traversal and absolute path allow to overwrite any file during archive extraction.
vulners.com/securityvulns/securityvulns:doc:11586
vulners.com/securityvulns/securityvulns:doc:11587
vulners.com/securityvulns/securityvulns:doc:11588
vulners.com/securityvulns/securityvulns:doc:11589
vulners.com/securityvulns/securityvulns:doc:11797
vulners.com/securityvulns/securityvulns:doc:11874
vulners.com/securityvulns/securityvulns:doc:12082
vulners.com/securityvulns/securityvulns:doc:12150
vulners.com/securityvulns/securityvulns:doc:12775
vulners.com/securityvulns/securityvulns:doc:17893
vulners.com/securityvulns/securityvulns:doc:1821
vulners.com/securityvulns/securityvulns:doc:3892
vulners.com/securityvulns/securityvulns:doc:4929
vulners.com/securityvulns/securityvulns:doc:6963
vulners.com/securityvulns/securityvulns:doc:6972
vulners.com/securityvulns/securityvulns:doc:6996
vulners.com/securityvulns/securityvulns:doc:7096
vulners.com/securityvulns/securityvulns:doc:7736
vulners.com/securityvulns/securityvulns:doc:7737
vulners.com/securityvulns/securityvulns:doc:7905
vulners.com/securityvulns/securityvulns:doc:8284