CVE-2026-28208
1 advisory.
Maven/com.github.junrar:junrar CVE-2026-28208: medium 5.9
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
Action: Upgrade com.github.junrar:junrar to 7.5.8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.5.8 | - |
Fixed versions
| 7.5.8 |
Sources
- osv: GHSA-j273-m5qq-6825
- https://github.com/junrar/junrar/security/advisories/GHSA-j273-m5qq-6825
- https://nvd.nist.gov/vuln/detail/CVE-2026-28208
- https://github.com/junrar/junrar/commit/947ff1d33f00f940aa68ae2593500291d799d954
- https://github.com/junrar/junrar
- https://github.com/junrar/junrar/releases/tag/v7.5.8
CVE-2026-28208 · published · modified · JSON