Search for packages
| purl | pkg:maven/com.github.junrar/junrar@1.0.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-m6cj-93v6-cvr5
Aliases: CVE-2022-23596 |
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive ### Impact A carefully crafted RAR archive can trigger … |
Vulnerable |
|
GHSA-hf5p-q87m-crj7
Aliases: CVE-2026-41245 |
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix ### Summary A path traversal vulnerability in `LocalFolderExtractor` allows an attacker … |
Vulnerable |
|
GHSA-j273-m5qq-6825
Aliases: CVE-2026-28208 |
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix ### Summary A backslash … |
Vulnerable |
|
GHSA-89m4-43j5-vhhx
Aliases: CVE-2026-86071 |
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root ## Summary `LocalFolderExtractor` validates only the final canonical file path … |
Not vulnerable |
|
GHSA-h9h9-2rmf-rvhp
Aliases: CVE-2026-97370 |
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction ### Summary Junrar's RAR virtual machine can be … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-12418
|
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service … | |
|
GHSA-5xqr-grq4-qwgx
|
Junrar vulnerable to Infinite Loop Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected … |
CVE-2018-12418
|