Are there vulnerabilities in reading archives?

Question

Python

There is a project where users can upload their archives.
The archives are read by the code provided below.
Is it possible to run a script, or exploit any other vulnerability? And what methods of protection should be used?

Answer 1

Offhand
1. zip-bomb https://ru.wikipedia.org/wiki/Zip-bomb
2. autorun variations (at one time there were such features in WinRAR)