Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.github.junrar/junrar@7.5.10
purl pkg:maven/com.github.junrar/junrar@7.5.10
Next non-vulnerable version 7.6.1
Latest non-vulnerable version 7.6.1
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-89m4-43j5-vhhx
Aliases:
CVE-2026-86071
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root ## Summary `LocalFolderExtractor` validates only the final canonical file path …
7.6.1
Not vulnerable
GHSA-h9h9-2rmf-rvhp
Aliases:
CVE-2026-97370
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction ### Summary Junrar's RAR virtual machine can be …
7.6.1
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-hf5p-q87m-crj7
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix ### Summary A path traversal vulnerability in `LocalFolderExtractor` allows an attacker … CVE-2026-41245
GHSA-hf5p-q87m-crj7
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix A path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write …