CVE-2026-96677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Juneau. HTML document serialization does not HTML-encode variable substitutions in the page chrome header, nav, aside, footer and similar fields. Applications whose chrome includes...