Apache Software Foundation Apache Juneau vulnerabilities and fixes
Exploited and high-severity Apache Software Foundation Apache Juneau vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 10.0CVE-2026-73100Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errorsFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-73101Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaultsFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-73116Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirectsFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-73117Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request dataFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-96677Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chromeFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-73099Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body overrideFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-121489Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directoryFix availableApache Software Foundation Apache Juneau
1 min read - 10.0CVE-2026-73098Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsingFix availableApache Software Foundation Apache Juneau
1 min read - 8.7CVE-2026-73095Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handlingFix availableApache Software Foundation Apache Juneau
1 min read