Open-source security: Zip Slip critical flaw hits thousands of projects. Update now