org.apache.juneau:juneau-rest-server. vulnerabilities
CVEs whose affected-version data names the org.apache.juneau:juneau-rest-server. package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-73099Critical· 10.0Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override
Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method, including GET. A cross-site link …
▾ MidnightApache Software Foundation · org.apache.juneau:juneau-rest-server.via CVEORG
CVE-2026-73101Critical· 10.0Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults
Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal exception class and message to clients in a "Thrown" response header on every error response, and can includ…
▾ MidnightApache Software Foundation · org.apache.juneau:juneau-rest-server.via CVEORG