Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.github.junrar/junrar@7.6.0
purl pkg:maven/com.github.junrar/junrar@7.6.0
Next non-vulnerable version 7.6.1
Latest non-vulnerable version 7.6.1
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-89m4-43j5-vhhx
Aliases:
CVE-2026-86071
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root ## Summary `LocalFolderExtractor` validates only the final canonical file path …
7.6.1
Not vulnerable
GHSA-h9h9-2rmf-rvhp
Aliases:
CVE-2026-97370
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction ### Summary Junrar's RAR virtual machine can be …
7.6.1
Not vulnerable
This package is not known to fix any advisories.