CVE-2022-23596

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem is patched in 7.4.1. There are no known workarounds and users are advised to upgrade as soon as possible.

• CWE-835
• CWE-835

• https://github.com/junrar/junrar/commit/7b16b3d90b91445fd6af0adfed22c07413d4fab7Patch, Third Party Advisory
• https://github.com/junrar/junrar/issues/73Exploit, Issue Tracking, Third Party Advisory
• https://github.com/junrar/junrar/security/advisories/GHSA-m6cj-93v6-cvr5Third Party Advisory
• https://github.com/junrar/junrar/commit/7b16b3d90b91445fd6af0adfed22c07413d4fab7Patch, Third Party Advisory
• https://github.com/junrar/junrar/issues/73Exploit, Issue Tracking, Third Party Advisory
• https://github.com/junrar/junrar/security/advisories/GHSA-m6cj-93v6-cvr5Third Party Advisory

Published

Feb 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23590Tensorflow is an Open Source Machine Learning Framework. A `…7.5
• CVE-2022-23591Tensorflow is an Open Source Machine Learning Framework. The…7.5
• CVE-2022-23592Tensorflow is an Open Source Machine Learning Framework. Ten…8.1
• CVE-2022-23593Tensorflow is an Open Source Machine Learning Framework. The…7.5
• CVE-2022-23594Tensorflow is an Open Source Machine Learning Framework. The…5.5
• CVE-2022-23595Tensorflow is an Open Source Machine Learning Framework. Whe…6.5
• CVE-2022-23597Element Desktop is a Matrix client for desktop platforms wit…8.8
• CVE-2022-23598laminas-form is a package for validating and displaying simp…6.1
• CVE-2022-23599Products.ATContentTypes are the core content types for Plone…6.1
• CVE-2022-23600fleet is an open source device management, built on osquery.…6.5
• CVE-2022-23601Symfony is a PHP framework for web and console applications …8.8
• CVE-2022-23602Nimforum is a lightweight alternative to Discourse written i…8.1