Vulnerabilities

TI-2026-85392 CVE-2026-121489 · GHSA-6jw3-6826-3jf9

Path traversal in Apache Juneau DirectoryResource exposes files

MEDIUM 43

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00496 Published 2026-11-05 Fixed in 9.2.1 CWE-22

TI-2026-85391 CVE-2026-96677 · GHSA-c66v-m2x5-fxxr

MEDIUM 43

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00444 Published 2026-11-05 Fixed in 9.2.1 CWE-79

TI-2026-85390 CVE-2026-73117 · GHSA-rw79-jgjp-5w92

MEDIUM 43

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00444 Published 2026-11-05 Fixed in 9.2.1 CWE-113

TI-2026-85389 CVE-2026-73116 · GHSA-x4m5-g65w-956p

MEDIUM 43

Insufficiently Protected Credentials vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00406 Published 2026-11-05 Fixed in 9.2.1 CWE-522

TI-2026-85388 CVE-2026-73101 · GHSA-7wmm-m82g-wjrm

MEDIUM 43

Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00428 Published 2026-11-05 Fixed in 9.2.1 CWE-209

TI-2026-85387 CVE-2026-73100 · GHSA-h63v-gj7g-mx8j

MEDIUM 43

Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00428 Published 2026-11-05 Fixed in 9.2.1 CWE-532

TI-2026-85386 CVE-2026-73099 · GHSA-79hg-89rr-x228

MEDIUM 48

Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00214 Published 2026-11-05 Fixed in 9.2.1 CWE-352

TI-2026-85385 CVE-2026-73098 · GHSA-59fg-f5xc-xjg9

MEDIUM 49

Improper control of dynamically-loaded code vulnerability in Apache Juneau.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00462 Published 2026-11-05 Fixed in 9.2.1 CWE-470

TI-2026-85384 CVE-2026-73095 · GHSA-79vh-374g-g44h

MEDIUM 44

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00428 Published 2026-11-05 Fixed in 9.2.1 CWE-770