Skip to content
OpenAdvisories

Package · Maven

com.github.junrar:junrar

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-41245

    Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix

    Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archi…

    junrar junrar com.github.junrar:junrar Maven
  • Medium 5.9
    CVE-2026-28208 EPSS 15%

    Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

    Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafte…

    junrar junrar com.github.junrar:junrar Maven
  • Medium 5.5
    CVE-2018-12418 Public exploit

    Junrar vulnerable to Infinite Loop

    Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

    com.github.junrar:junrar Maven