Juneau (<= 9.2.0)

Apache Juneau RestClient prior to version 9.2.1 contains a vulnerability where sensitive header information is forwarded across origins during HTTP redirects, enabling unauthorized credential interception.

A critical path traversal vulnerability in Apache Juneau (versions 9.2.0 and earlier) allows unauthenticated remote attackers to read, write, or delete arbitrary files if specific DirectoryResource settings are enabled.