It writes data to files, it may be used to do privileged writes or write files outside a restricted file system.
When possible, it is advised to select the TAR archive format to avoid compressing the contents.
git archive '--output=/tmp/foo'
HackerOne #587854 Local files could be overwritten in GitLab, leading to remote command execution