As we discussed today, there's a ZIP Slip vulnerability below here. The filename should be sanitized to prevent directory traversal:
https://github.com/WordPress/blueprints-library/blob/f2ddfa54a97220249201535f1d37726c416f915d/src/WordPress/Zip/functions.php#L17C51-L17C62
Also, maybe it's good to check for Symlinks and how they are being treated nowadays ;)
As we discussed today, there's a ZIP Slip vulnerability below here. The filename should be sanitized to prevent directory traversal:
https://github.com/WordPress/blueprints-library/blob/f2ddfa54a97220249201535f1d37726c416f915d/src/WordPress/Zip/functions.php#L17C51-L17C62
Also, maybe it's good to check for Symlinks and how they are being treated nowadays ;)