Vulnerabilitymedium

Apache Juneau 9.2.1 fixes multiple vulnerabilities

Original title: [SECURITY] Apache Juneau 9.2.1 fixes multiple vulnerabilities (CVE-2026-73095, CVE-2026-121489, CVE-2026-96677, CVE-2026-73099, CVE-2026-73100, CVE-2026-73101, CVE-2026-73098, CVE-2026-73116, CVE-2026-73117)

oss-securityNov 4, 2026 · 16:04 UTC (7d ago)1

Read at seclists.org

AI summary · x-ai/grok-4.7Summaries by Vani AI

Apache Juneau 9.2.1, released November 3, addresses multiple CVEs including CVE-2026-73095.

Apache released version 9.2.1 of its Juneau software to fix several vulnerabilities. The update is available via Maven and direct downloads. No details on the specific issues were provided in the announcement.

Key facts

Released on 2026-11-03
Fixes CVE-2026-73095, CVE-2026-121489, CVE-2026-96677, CVE-2026-73099, CVE-2026-73100, CVE-2026-73101, CVE-2026-73098, CVE-2026-73116, CVE-2026-73117
Upgrading recommended

Security assessment · AI, from the article

What to do

1.Upgrade to Juneau 9.2.1

Analyze CVE-2026-73095 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-73095 CVE-2026-121489 CVE-2026-96677 CVE-2026-73099 CVE-2026-73100 CVE-2026-73101 CVE-2026-73098 CVE-2026-73116 CVE-2026-73117

Tags: apache juneau

Vendors: Apache
Products: Juneau

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-121489 +8 related CVEs CVE-2026-73098 CVE-2026-73099 CVE-2026-73100 CVE-2026-73101 CVE-2026-73116 CVE-2026-73117 CVE-2026-96677 CVE-2026-73095	Path Traversal in Apache Juneau before 9.2.1	10.0 group max	—		6d ago

From the original article

Posted by James Bognar on Nov 04 Apache Juneau 9. 2. 1, released on 2026-11-03, fixes the following https://downloads.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.