An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.