Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory.
A maliciously crafted archive may allow an attacker to create a symlink outside the extraction target directory.
Advisories for Golang/Github.com/Codeclysm/Extract/V4 package
2024