CVE-2026-97370
1 advisory.
Maven/com.github.junrar:junrar CVE-2026-97370: high 7.5, EPSS 0.40%
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
Action: Upgrade com.github.junrar:junrar to 7.6.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.6.1 | - |
Fixed versions
| 7.6.1 |
Sources
- osv: GHSA-h9h9-2rmf-rvhp
- https://github.com/junrar/junrar/security/advisories/GHSA-h9h9-2rmf-rvhp
- https://github.com/junrar/junrar/commit/687a09c42f46066447faa9179ee11314ad6d9afb
- https://github.com/junrar/junrar
- https://github.com/junrar/junrar/releases/tag/v7.6.1
CVE-2026-97370 · published · modified · JSON