selmf unarr

• CVE-2026-111274 Medium 5.5 unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields 0.2%
• CVE-2026-111273 Medium 6.1 unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name 0.2%