Zip Slip Vulnerability

[Lucisu]

As we discussed today, there's a ZIP Slip vulnerability below here. The filename should be sanitized to prevent directory traversal:

https://github.com/WordPress/blueprints-library/blob/f2ddfa54a97220249201535f1d37726c416f915d/src/WordPress/Zip/functions.php#L17C51-L17C62

Also, maybe it's good to check for Symlinks and how they are being treated nowadays ;)