CVE-2026-73100
Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a server error gets headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key written in cleartext to the application log, exposing them to anyone who can read the logs. This issue affects Apache Juneau: through 9.2.0. Users are recommended to upgrade to version 9.2.1, which fixes the issue.
| CWE | CWE-532 |
| Vendor | apache software foundation |
| Product | apache juneau |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache juneau
Be the first to know when new unknown vulnerabilities affecting apache software foundation apache juneau are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache Juneau
0 < 9.2.1
Apache Software Foundation / Apache Juneau
0 < 9.2.1