max-mapper extract-zip

• CVE-2026-19693 High 8.1 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component 0.5%
• CVE-2026-56876 High 8.1 extract-zip unvalidated symlink path traversal 0.5%