Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
SubFileSystem fails to confine operations to its declared sub path when the input path is /../ (or equivalents /../, /..\). This path passes all validation but resolves to the root of the parent filesystem, allowing directory level operations outside the intended boundary.