VendorsJunrar Projectjunrarany version
Vulnerabilities

Junrar Project Junrar any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-41245
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Published 2026-04-20 · Modified
9.3EPSS 0.005
CVE-2022-23596
Infinite loop in junrar
Published 2022-02-01 · Modified
7.5EPSS 0.016
CVE-2026-28208
Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix
Published 2026-02-26 · Modified
5.9EPSS 0.008
CVE-2018-12418
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.
Published 2018-06-14 · Modified
5.5EPSS 0.012