JunRAR license have been cleared and is fine to be used with both CE and EE. Details: Was always fine for EE. For CE we do not need exception since the use is only transitively over public APIs of JR which uses it over public APIs of Tika and GPLv3 doesn't conflict/transfers over use of public APIs (similar to how use of JR with Apache license doesn't conflict with GPL).
See https://git.magnolia-cms.com/projects/BUILD/repos/boms/commits/be27d44990a46cf2b66457914e283af24f681b94