Skip to content
OpenAdvisories

Vendor

junrar

4 known vulnerabilities.

Products

junrar 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-41245

    Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix

    Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archi…

    junrar junrar com.github.junrar:junrar Maven
  • Medium 5.9
    CVE-2026-28208 EPSS 15%

    Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

    Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafte…

    junrar junrar com.github.junrar:junrar Maven