Threats affecting pkg:maven/org.apache.juneau/juneau-rest-client

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	10.0	CVE-2026-73116Apache Juneau · Insufficiently Protected Credentials Critical10.02026-11-05CVE Database V5CVE-2026-73116 CVE-2026-73116 is a critical vulnerability in Apache Juneau through version 9.2.0 where the RestClient improperly retains credential headers during HTTP redirects. This allows sensitive headers such as Authorization, Cookie, Proxy-Authorization, and X-API-Key to be sent to unintended hosts or downgraded protocols. The issue is fixed in version 9.2.1. Vulnerability Apache Software Foundation CWE-522	CVE Database V5	2026-11-05

Page 1 of 1