{"action":"Upgrade com.github.junrar:junrar to 7.4.1 or later.","affected":[{"fixed":"7.4.1","introduced":"0"}],"component":"com.github.junrar:junrar","cve_ids":["CVE-2022-23596"],"ecosystem":"Maven","epss":0.01632,"exploited":false,"fixed_versions":["7.4.1"],"ghsa_id":"GHSA-m6cj-93v6-cvr5","id":"tcs_01M5N94HJ9ZV7MRM39TZ5AMDNG","modified_at":"2026-09-10T03:49:12.286440517Z","published_at":"2022-02-01T00:47:23Z","references":["https://osv.dev/vulnerability/GHSA-m6cj-93v6-cvr5","https://github.com/junrar/junrar/security/advisories/GHSA-m6cj-93v6-cvr5","https://nvd.nist.gov/vuln/detail/CVE-2022-23596","https://github.com/junrar/junrar/issues/73","https://github.com/junrar/junrar/commit/7b16b3d90b91445fd6af0adfed22c07413d4fab7","https://github.com/junrar/junrar"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m6cj-93v6-cvr5","url":"https://osv.dev/vulnerability/GHSA-m6cj-93v6-cvr5"}],"summary":"Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive"}