land.oras:oras-java-sdk vulnerabilities (Maven)

2 vulnerabilities.

• land.oras:oras-java-sdk Maven land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory GHSA-j6hm-v3x2-qv6j Fix available 0.0 NoneJuly 1, 2026
• land.oras:oras-java-sdk Maven ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation GHSA-xm96-gfjx-jcrc Fix available 8.1 HighMay 19, 2026