Arbitrary file write during tarfile extraction — CodeQL query help documentation