Vulnerabilities in junrar

4 results

CVE-2026-28208MEDIUMJunrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/UnixEPSS 14.7%CVE-2026-97370HIGHJunrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extractionEPSS 0.4%CVE-2026-86071LOWJunrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction rootEPSS 0.4%CVE-2026-41245MEDIUMJunrar: Path Traversal (Zip-Slip) via Sibling Directory Name PrefixEPSS 0.3%