https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T16:24:30.443995+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-73100 CVE-2026-73100 — Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors 2026-11-09T16:24:30.445705+00:00

Affected: Apache Software Foundation Apache Juneau

Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.

The default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a server error gets headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key written in cleartext to the application log, exposing them to anyone who can read the logs.

This issue affects Apache Juneau: through 9.2.0.

Users are recommended to upgrade to version 9.2.1, which fixes the issue.