- Latest release
- 9.2.1 (Nov 4, 2026): no advisory affects it
- Newest unaffected release
- 9.2.1 (Nov 4, 2026), the latest release
- Advisories
- 1 · 1 critical
- Dependents
- 9
- Releases
- 14 since 8.0.0 (Dec 23, 2018)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-121489Affects 8.0.0 to 9.2.0 (9.2.1 is outside it)
Advisories 1
- CVE-2026-121489Critical 10.0
Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory
Affected: fixed in 9.2.1.
Fixed in 9.2.1 (released Nov 4, 2026, 1 day before disclosure).
The latest release, 9.2.1, is not affected.