BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284 (CVE-2026-12565) | HOL Guard CVE