Apache Juneau versions through 9.2.0 have a vulnerability where sensitive request headers are logged in cleartext when a server error occurs. This includes headers such as Authorization, Cookie, Proxy-Authorization, and X-API-Key. The issue is fixed in version 9.2.1.