TI-2026-29854 CVE-2026-41245 · GHSA-hf5p-q87m-crj7
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Priority LOW 33
Junrar is an open source java RAR archive library.
Vulnerabilities
4 records
TI-2026-22543 CVE-2026-28208 · GHSA-j273-m5qq-6825
Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix
Priority MEDIUM 62
Junrar is an open source java RAR archive library.
TI-2022-07649 CVE-2022-23596 · GHSA-m6cj-93v6-cvr5
Infinite loop in junrar
Priority HIGH 72
Junrar is an open source java RAR archive library.
TI-2018-08916 CVE-2018-12418 · GHSA-5xqr-grq4-qwgx
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is…
Priority LOW 27
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.