The high-severity defect affects a widely used — but largely hidden — archive tool that spans many forks.