j
junrar project
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 14, 2018 to present
4
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
50/100
medium
Severity Distribution
Critical
1High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
Most Affected Products
1. Junrar Project Junrar4
2. maven/com.github.junrar/junrar1
3. Junrar Junrar1
4. maven/com.github.junrar:junrar1
5. redhat/junrar1
Recent Vulnerabilities
See more →CVE-2026-41245
CVSS 9.3critical
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Apr 20, 2026🔧 No Patch
CVE-2026-28208
CVSS 5.9EPSS 0%medium
Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix
Feb 26, 2026
CVE-2022-23596
CVSS 7.5high
Infinite loop in junrar
Jan 27, 2022
CVE-2018-12418
CVSS 5.5medium
Jun 14, 2018
Monitor junrar project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.