Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

junrar vulnerabilities

4 published CVEs name junrar among the affected products.

Newest CVEs

  • CVE-2026-97370

    Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

    junrar · junrar

    High7.5
  • CVE-2026-86071

    Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

    junrar · junrar

    Low3.7
  • CVE-2026-41245

    Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix

    junrar · junrar

    Medium5.9
  • CVE-2026-28208

    Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

    junrar · junrar

    Medium5.9