Cyber ·
Apache Juneau 9.2.1 fixes several vulnerabilities affecting versions up to 9.2.0
Advisory on Apache Juneau 9.2.1, released on November 3, 2026, which fixes several vulnerabilities present up to version 9.2.0. Aggregated artifacts that embed the affected modules must also be updated.
According to the advisory published on November 4, 2026 on the oss-sec list and signed by James Bognar, Apache Juneau 9.2.1, released on November 3, 2026, fixes several vulnerabilities. All of them affect Apache Juneau up to version 9.2.0, and the recommendation is to update to version 9.2.1.
The original text does not detail, in this version of the advisory, each flaw, its severity or individual identifiers; those details should be checked at the official source. The juneau-shaded-* artifacts and other aggregated artifacts that embed the affected modules are affected in the same way, so they must also be updated to version 9.2.1. The indicated Maven coordinates are org.apache.juneau, version 9.2.1.
To consult the original, look for the advisory in the 2026 oss-sec list archive or visit the official Apache Juneau site in your browser. To verify the fix, check the Juneau version in the project dependencies and in the packaged artifacts, including builds and images.
Original source: Apache Juneau 9.2.1 corrige várias vulnerabilidades