junrar vulnerabilities
CVEs whose affected-version data names the junrar package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86071Low· 3.7Junrar is an open source Java RAR archive library
Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create directories outside the intended extraction root when processing a cr…
▾ Sunlitjunrar · junrarEPSS 0.30%via NVD
CVE-2026-41245Medium· 5.9Junrar is an open source java RAR archive library
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories wh…
▾ Sunlitjunrar_project · junrarEPSS 0.34%via NVD