https://www.systemtek.co.uk/2018/08/apache-commons-compress-ziparchiveinputstream-denial-of-service-vulnerability-cve-2018-11771/