CVE-2026-73117 - Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data
CVE ID :CVE-2026-73117 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description :Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau. The Apache Juneau REST server passed response header values and redirect targets to...