adm-zip 0.6.0 follows a symlink already present in the extraction directory and writes the entry outside it (GHSA-vwc7-r8mq-g2x9). 0.6.1 refuses the extraction. The test fails with 0.6.0 and passes with 0.6.1. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>