com.github.junrar:junrar
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction | com.github.junrar:junrarRed Hat Fuse 7/junrar | MavenRed Hat | High | Fix reported | |
| Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root | com.github.junrar:junrar | Maven | Low | Fix reported | |
| Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive | com.github.junrar:junrarRed Hat BPM Suite 6/junrar | MavenRed Hat | High | Fix reported | |
| Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix | com.github.junrar:junrarRed Hat Fuse 7/junrar | MavenRed Hat | Medium | Fix reported | |
| Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix | com.github.junrar:junrarRed Hat Fuse 7/junrar | MavenRed Hat | Medium | Fix reported | |
| Junrar vulnerable to Infinite Loop | com.github.junrar:junrar | Maven | Medium | Fix reported |