Fix security hotspot on zipinputstream processing