https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:31:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354852 EUVD-2026-354852 https://cve.radiocsirt.org/vuln/euvd-2026-354852 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41245 <p>Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.</p> <p>Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41245 https://cve.radiocsirt.org/vuln/ghsa-hf5p-q87m-crj7 <p><strong>Affected:</strong> Maven: com.github.junrar:junrar</p> <p>### Summary</p> <p>A path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted.</p> <p>### Example</p> <p>Given an extraction directory set to `/tmp/extract`, a crafted archive with an entry with the filename as `../extract_evil/file.txt` would be actually extracted to `/tmp/extract_evil/file.txt`.</p> <p>### Details</p> <p>The `createDirectory()` and `createFile()` methods in`LocalFolderExtractor` validate extraction paths using a string prefix.</p> <p><strong>Affected:</strong> Maven: com.github.junrar:junrar</p> <p>### Summary</p> <p>A path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted.</p> <p>### Example</p> <p>Given an extraction directory set to `/tmp/extract`, a crafted archive with an entry with the filename as `../extract_evil/file.txt` would be actually extracted to `/tmp/extract_evil/file.txt`.</p> <p>### Details</p> <p>The `createDirectory()` and `createFile()` methods in`LocalFolderExtractor` validate extraction paths using a string prefix.</p> https://cve.radiocsirt.org/vuln/ghsa-hf5p-q87m-crj7