Code execution via unchecked absolute extraction paths

Path traversal in DotNetZip 1.10.1 through 1.16.0 allows remote attackers to write files outside the extraction directory. ZipEntry.Extract sanitizes an entry name before later mutating its destination path, then writes it without resolving and confirming that the final path remains beneath the selected base directory. Exploitation requires a consuming application to extract an attacker-supplied ZIP entry; an absolute pathname can overwrite a security-sensitive file and lead to code execution in that application's context.