Archive expands beyond limits
Why it happens
Compressed size does not bound extracted bytes or file count.
Potential bug
Scanner exhausts disk, memory, or CPU.
Mitigation
Sandbox extraction with byte/file/depth/time limits and reject path traversal.
Compressed size does not bound extracted bytes or file count.
Scanner exhausts disk, memory, or CPU.
Sandbox extraction with byte/file/depth/time limits and reject path traversal.