org.apache.juneau:juneau-commons vulnerabilities

CVEs whose affected-version data names the org.apache.juneau:juneau-commons package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121489Critical· 10.0

yesterday

Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau. The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enab…

▾ MidnightApache Software Foundation · org.apache.juneau:juneau-microservice-corevia CVEORG