fixes CVE-2007-4559: https://github.com/advisories/GHSA-gw9q-c7gh-j9vm,</span>
            <span class="c1"># which is a 15 year old bug in the Python tarfile package. By using extract() or extractall()</span>
            <span class="c1"># on a tarfile object without sanitizing input, a maliciously crafted .tar file could perform a directory path traversal attack.</span>
            <span class="c1"># We (Advanced Research Center at Trellix: https://www.trellix.com/) found at least one unsantized extractal