[Arbitrary file read+write on host via metadata.yaml symlink in crafted image]
https://github.com/lxc/incus/security/advisories/GHSA-fmjx-5j3g-997p
https://github.com/lxc/incus/pull/3750
