CVE-2026-121489 - Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory
CVE ID :CVE-2026-121489 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description :Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau. The microservice DirectoryResource does not keep request paths inside its configured root...