Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

CVE-2026-41245

Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix

Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Junrar Junrar Project
Products
Junrar Junrar
CVE-2026-28208

Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution (e.g., overwriting shell profiles, source code, cron jobs, etc). Version 7.5.8 has a fix for the issue.

CVSS 3.1 · 5.9 Medium EPSS 14.7% KEV · Not listed
Vendors
Junrar Junrar Project
Products
Junrar Junrar
CVE-2022-23596

Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem is patched in 7.4.1. There are no known workarounds and users are advised to upgrade as soon as possible.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Junrar Project Redhat
Products
Junrar Jboss Fuse
CVE-2018-12418

junrar: infinite loop when handling corrupt RAR files

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Junrar Project
Products
Junrar