symlink 1 GHSA-x2x8-gq67-9mq6「With the default SymlinkExtractAction::ExtractRecursiveInFolder (since v9.0.0), symlinks pointing outside the extraction directory are still created」 Oct 24, 2026