Junrar Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Junrar Project records in CISA KEV

No Junrar Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Junrar 4 records HIGH

Records

4 records in Junrar · all components

TI-2022-07649 CVE-2022-23596 · GHSA-m6cj-93v6-cvr5

Infinite loop in junrar

HIGH 72

Junrar is an open source java RAR archive library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01632 Published 2022-02-01 Partial fix · 7.4.1 CWE-835

TI-2026-22543 CVE-2026-28208 · GHSA-j273-m5qq-6825

Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

MEDIUM 62

Junrar is an open source java RAR archive library.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.14739 Published 2026-02-26 Partial fix · 7.5.8 CWE-22

TI-2026-29854 CVE-2026-41245 · GHSA-hf5p-q87m-crj7

Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix

LOW 33

Junrar is an open source java RAR archive library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00336 Published 2026-04-20 Partial fix · 7.5.10 CWE-22

TI-2018-08916 CVE-2018-12418 · GHSA-5xqr-grq4-qwgx

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is…

LOW 27

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01169 Published 2018-06-14 Fixed in 1.0.1 CWE-835

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0