`ant-releases` crate versions from 0.0.0-0 onwards contain a path traversal vulnerability in the archive extraction function. The vulnerability allows crafted ZIP archives with entries containing relative paths (e.g., '../') to write files outside the intended destination directory, potentially overwriting arbitrary files on the host system.