Apache Apache Juneau
9 CVEs affecting Apache Apache Juneau. Latest disclosed: 2026-11-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-96677 | | 2026-11-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau. HTML document serialization does not HTML… | |
CVE-2026-73117 | | 2026-11-05 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau. The Apache Juneau REST server passed res… | |
CVE-2026-73116 | | 2026-11-05 | Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while keeping credential headers fro… | |
CVE-2026-73101 | | 2026-11-05 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal exception class and message to… | |
CVE-2026-73100 | | 2026-11-05 | Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that… | |
CVE-2026-73099 | | 2026-11-05 | Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this… | |
CVE-2026-73098 | | 2026-11-05 | Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache Juneau parses a value into a property of type java.lang.Class (includi… | |
CVE-2026-73095 | | 2026-11-05 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes b… | |
CVE-2026-121489 | | 2026-11-05 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau. The microservice DirectoryResource does not kee… |