CVE-2026-96677

Apache Juneau versions through 9.2.0 are vulnerable to a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The root cause is that HTML document serialization fails to HTML-encode variable substitutions in the page chrome, such as headers,...