land.oras:oras-java-sdk vulnerabilities

CVEs whose affected-version data names the land.oras:oras-java-sdk package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-j6hm-v3x2-qv6jLow

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

▾ Sunlitoras · land.oras:oras-java-sdkvia GHSA

land.oras:oras-java-sdk vulnerabilities (CVEs) · VulnSea