How to solve a security break in creating File with a specified name in Java code?

Question

The security code scan does not like the following Java code:

File localCsvFile = new File(MessageFormat.format(REPORT_ZIP_PATH_FORMAT,
            REPORT_LOC