- Latest release
- 9.2.1 (Nov 4, 2026): no advisory affects it
- Newest unaffected release
- 9.2.1 (Nov 4, 2026), the latest release
- Advisories
- 1 · 1 critical
- Dependents
- 11
- Releases
- 25 since 6.1.0-incubating (Feb 16, 2017)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-73116Affects 6.1.0-incubating to 9.2.0 (9.2.1 is outside it)
Advisories 1
- CVE-2026-73116Critical 10.0
Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects
Affected: fixed in 9.2.1.
Fixed in 9.2.1 (released Nov 4, 2026, 1 day before disclosure).
The latest release, 9.2.1, is not affected.