Detections
Analytics
SCA: security update for land.oras:oras-java-sdk (GHSA-j6hm-v3x2-qv6j)
high Tenable Self-Hosted Container Security Plugin ID 444264
Description
land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directorySolution
Update the land.oras:oras-java-sdk library and its related packages to version 0.6.4 or later.See Also
Plugin Details
Severity: High
ID: 444264
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 7/2/2026
Updated: 7/2/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/1/2026
Vulnerability Publication Date: 7/1/2026