Junrar vulnerabilities
We track 2 vulnerabilities in Junrar products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Junrar vulnerabilities
- 7.5 High severity
junrar: Loop with Unreachable Exit Condition
Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VM_JMP instruction whose target is greater than or equal to the prepared program's codeSize. T
- 7.5 High severity
junrar: Improper Limitation of a Pathname to a Restricted Directory
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archiv