XhmikosR decompress

• CVE-2026-101894 Critical 9.1 @xhmikosr/decompress: Path traversal via symlink chain 0.8%
• CVE-2026-53486 Critical 9.1 decompress: Archive extraction can create files and links outside the target directory 0.7%