Paths or symlinks ending in a slash escape the sandbox

ocipkg: unpacking an OCI archive can write and delete files outside the local image store (path traversal)

Path traversal in rio-vt Kitty graphics protocol handler allows out-of-bounds file delete (and read)

ant-releases: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

nix-nar: Decoder::unpack writes archive entries outside the destination directory (path traversal)

sn-releases: extract_release_archive writes archive entries without a path-traversal check (zip-slip)

decompress: tar-family extractors write archive entries without a path-traversal check (tar-slip)

uncbv: archive extraction is vulnerable to path traversal (zip-slip)

unzip: archive extraction is vulnerable to path traversal (zip-slip)

Path traversal in apimock's file-serving fallback

Path traversal in apimock-server's file-serving fallback

Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write

OCI layer symlink escape → arbitrary host write

cap-primitives doesn't fully sandbox all the Windows device filenames