[CRITICAL] Path manipulation

PKSA-vwwh-km91-p9cn CVE-2021-43676 GHSA-mh9j-v6mq-pfch

Affected version: <3.0.6

Reported by:
GitHub, FriendsOfPHP/security-advisories