agentprime: apache-software-foundation-apache-juneauEvery new CVE for apache-software-foundation-apache-juneau.https://agentprime.io/CVE-2026-121489: Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directoryhttps://agentprime.io/advisories/CVE-2026-121489/https://agentprime.io/advisories/CVE-2026-121489/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:55:23 GMTCVEcriticalCVE-2026-96677: Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chromehttps://agentprime.io/advisories/CVE-2026-96677/https://agentprime.io/advisories/CVE-2026-96677/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:54:38 GMTCVEcriticalCVE-2026-73117: Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request datahttps://agentprime.io/advisories/CVE-2026-73117/https://agentprime.io/advisories/CVE-2026-73117/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:54:11 GMTCVEcriticalCVE-2026-73116: Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirectshttps://agentprime.io/advisories/CVE-2026-73116/https://agentprime.io/advisories/CVE-2026-73116/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:53:52 GMTCVEcriticalCVE-2026-73101: Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaultshttps://agentprime.io/advisories/CVE-2026-73101/https://agentprime.io/advisories/CVE-2026-73101/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:52:25 GMTCVEcriticalCVE-2026-73100: Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errorshttps://agentprime.io/advisories/CVE-2026-73100/https://agentprime.io/advisories/CVE-2026-73100/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:50:50 GMTCVEcriticalCVE-2026-73099: Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body overridehttps://agentprime.io/advisories/CVE-2026-73099/https://agentprime.io/advisories/CVE-2026-73099/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:50:02 GMTCVEcriticalCVE-2026-73098: Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsinghttps://agentprime.io/advisories/CVE-2026-73098/https://agentprime.io/advisories/CVE-2026-73098/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:49:18 GMTCVEcriticalCVE-2026-73095: Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handlinghttps://agentprime.io/advisories/CVE-2026-73095/https://agentprime.io/advisories/CVE-2026-73095/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:48:25 GMTCVE