org.apache.juneau:juneau-rest-common vulnerabilities
CVEs whose affected-version data names the org.apache.juneau:juneau-rest-common package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-73116Critical· 10.0Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects
Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different …
▾ MidnightApache Software Foundation · org.apache.juneau:juneau-rest-clientvia CVEORG
CVE-2026-73100Critical· 10.0Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors
Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a ser…
▾ MidnightApache Software Foundation · org.apache.juneau:juneau-rest-servervia CVEORG