BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.
https://github.com/number000000/18739-D-CVE-1
https://blog.blacklanternsecurity.com/p/bbot-security-advisory-gitdumper