Mborne @mborne/extract vulnerabilities

• mborne @mborne/extract @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir CVE-2026-110639 9.3 CriticalOctober 14, 2026