{"id":"CVE-2026-73101","published":"2026-11-05T12:17:51.197","lastModified":"2026-11-05T15:01:29.553","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau.\n\nThe REST server sends the internal exception class and message to clients in a \"Thrown\" response header on every error response, and can include internal exception messages in the error body, even when stack-trace rendering is disabled. This reveals implementation details to remote clients.\n\nThis issue affects Apache Juneau: through 9.2.0.\n\nUsers are recommended to upgrade to version 9.2.1, which fixes the issue.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-209"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/j05q7vw08j48o96tdlzcsd4sozx1lyl6","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}