PHP 7.3.31 has been released with a security fix for ZipArchive::extractTo.
php-7.3.31
- Zip:
php-7.3.31
. Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination). (cmb)