CVE-2026-45384: Insecure Symlink Resolution Basepathcve-2026-45384-insecure-symlink-resolution-basepath
A symlink target is constructed and validated against an extraction base path instead of the symlink's actual parent directory. This writes absolute or structurally vulnerable relative paths directly into the symlink, leading to path traversal bypasses when traversed by the OS. Derive the safe execution target using `lexically_relative(symlink.parent_path())
