I have a project that uses JSZip v2, which is affected by GHSA-jg8v-48h5-wgxg. This was fixed for v3 by #766, but I probably don't have time to upgrade to v3 right now. Would you be willing to backport #766 to v2 and make a new release?