EUVD-2026-117406

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...

CVE-2026-73095

Apache Juneau versions through 9.2.0 are vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability. The MessagePack parser , enabled by default in the REST server, sizes buffers based on length values provided in the input. An unauthenticated client can send a small amou...