Junrar_project Junrar
4 CVEs affecting Junrar_project Junrar. Latest disclosed: 2026-04-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23596 | High | 7.5 | 2022-02-01 | Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said arch… |
CVE-2026-41245 | Medium | 5.9 | 2026-04-20 | Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to writ… |
CVE-2026-28208 | Medium | 5.9 | 2026-02-26 | Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacke… |
CVE-2018-12418 | Medium | 5.5 | 2018-06-14 | Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when h… |