Arbitrary file deletion via archive path traversal

Path traversal in thefuck before 3.31 allows attackers to delete arbitrary files via the undo archive operation feature. The dirty_untar.py and dirty_unzip.py handlers iterate archive entry names and call os.remove on each path without constraining it to the working directory, so crafted ../ paths target files outside that directory. Exploitation requires tricking a user into invoking the undo operation on a crafted archive; the demonstrated impact is arbitrary file deletion or overwrite on the host.