JU
Vendor
junrar
4
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97370 | JU junrar junrar | 7.5 | Oct 15 | Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction |
| CVE-2026-86071 | JU junrar junrar | 3.7 | Sep 16 | Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root |
| CVE-2026-41245 | JU junrar junrar | 7.5 | Apr 20 | Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix |
| CVE-2026-28208 | JU junrar junrar | 5.9 | Feb 26 | Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix |