CVE-2026-24901: Unsafe Zip Decompression Readcve-2026-24901-unsafe-zip-decompression-read
Variables derived from archive extraction are read directly into memory using `fs.readFile()`. If the archive is a "zip bomb" (highly compressed large files) and lacks size checks, this leads to memory resource exhaustion and Denial of Service (DoS). Replace complete file buffering with bounded streams or explicitly validate the file size before reading it i