https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 19:36:10 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73116 <p>Insufficiently Protected Credentials vulnerability in Apache Juneau.</p> <p>The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue. The fix applies to HTTP clients created by the RestClient builder; applications that supply their own HttpClient must disable automatic redirects or strip credential headers on cross-origin redirects themselves.</p> <p>Insufficiently Protected Credentials vulnerability in Apache Juneau.</p> <p>The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue. The fix applies to HTTP clients created by the RestClient builder; applications that supply their own HttpClient must disable automatic redirects or strip credential headers on cross-origin redirects themselves.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73116 https://db.gcve.eu/vuln/ghsa-x4m5-g65w-956p <p>Insufficiently Protected Credentials vulnerability in Apache Juneau.</p> <p>The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue. The fix applies to HTTP clients created by the RestClient builder; applications that supply their own HttpClient must disable automatic redirects or strip credential headers on cross-origin redirects themselves.</p> <p>Insufficiently Protected Credentials vulnerability in Apache Juneau.</p> <p>The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue. The fix applies to HTTP clients created by the RestClient builder; applications that supply their own HttpClient must disable automatic redirects or strip credential headers on cross-origin redirects themselves.</p> https://db.gcve.eu/vuln/ghsa-x4m5-g65w-956p