JU
Product
junrar
4
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 1Low 1
Watch
Add junrar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97370 | 7.5 | Oct 15 | Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction Affected: < 7.6.1 |
| CVE-2026-41245 | 7.5 | Apr 20 | Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix Affected: < 7.5.10 |
| CVE-2026-28208 | 5.9 | Feb 26 | Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix Affected: < 7.5.8 |
| CVE-2026-86071 | 3.7 | Sep 16 | Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root Affected: < 7.6.1 |
Showing 4