Runnerty @runnerty/executor-decompress vulnerabilities

• runnerty @runnerty/executor-decompress @runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name CVE-2026-110641 8.7 HighOctober 14, 2026