{"metadata": {"vulnerability": "CVE-2026-73101", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-10T20:29:44.156Z", "date_only": false, "value": "2026-08-10T20:29:44.156Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-05T11:52:25.335Z", "date_only": false, "value": "2026-11-05T11:52:25.335Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T11:52:25.335Z", "date_only": false, "value": "2026-11-05T11:52:25.335Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-73101", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T11:58:53.831Z", "date_only": false, "value": "2026-11-05T11:58:53.831270Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117563715301189677", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "5ec7609f-947c-4401-8990-0962753297b2", "content": "CVE-2026-73101 Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau.\nThe REST server sends the internal exception class and message to clients in a \"Thrown\" response header on every error response, and can include internal exception messages in the error body, even when stack-trace rendering is disabled. This reveals implementation details to remote clients.\nThis issue affects Apache Juneau: through 9.2.0.\nUsers are recommended to upgrade to version 9.2.1, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-73101https://lists.apache.org/thread.html/j05q7vw08j48o96tdlzcsd4sozx1lyl6#apache #ApacheSoftwareFoundation #ApacheJuneau#CVE_2026_73101#bot", "url": "https://infosec.exchange/users/cve/statuses/117563715301189677"}, {"timestamp": "2026-11-05T12:17:51Z", "date_only": false, "value": "2026-11-05T12:17:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7WMM-M82G-WJRM", "record": "GHSA-7WMM-M82G-WJRM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-05T12:17:51.197Z", "date_only": false, "value": "2026-11-05T12:17:51.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73101", "record": "FKIE_CVE-2026-73101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T12:32:14Z", "date_only": false, "value": "2026-11-05T12:32:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7WMM-M82G-WJRM", "record": "GHSA-7WMM-M82G-WJRM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T12:32:14Z", "date_only": false, "value": "2026-11-05T12:32:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7WMM-M82G-WJRM", "record": "GHSA-7WMM-M82G-WJRM", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T12:34:30.798Z", "date_only": false, "value": "2026-11-05T12:34:30.798764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzkuvrrdsvko", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "cd4de912-7f7b-4d66-b738-dd4811ad3edf", "content": "CVE Radar | CVE-2026-73101 | CVSS 10.0\n\nApache Juneau Error Information Disclosure\n\nCVE-2026-73101 is a CRITICAL information-disclosure vulnerability in Apache Juneau.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1381", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzkuvrrdsvko"}, {"timestamp": "2026-11-05T12:40:04.938Z", "date_only": false, "value": "2026-11-05T12:40:04.938854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzkv7rlbrw2t", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "f2d26899-ce8d-427c-b928-e96cde23b2ef", "content": "CVE-2026-73101 - apache juneau\nApache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an error\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachejuneau #apachefoundation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzkv7rlbrw2t"}, {"timestamp": "2026-11-05T13:53:27.848Z", "date_only": false, "value": "2026-11-05T13:53:27.848620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/elh7xmhpjz3me", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "ed38b929-0e21-4303-b388-d03e95f5c155", "content": "CVE-2026-73101 - Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults\nCVE ID : CVE-2026-73101\n \n Published : Nov. 5, 2026, 12:17 p.m. | 50\u00a0minutes ago\n \n Description : Generation of Error Message Contain...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/elh7xmhpjz3me"}, {"timestamp": "2026-11-05T14:07:47.212Z", "date_only": false, "value": "2026-11-05T14:07:47.212389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzl24m66fj25", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "bddeccbc-cb1f-4713-9b0f-950398b375e4", "content": "\ud83d\udea8 CVE-2026-73101 \u2014 CVSS 10 CRITICAL\n\nGeneration of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST serve...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73101\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzl24m66fj25"}, {"timestamp": "2026-11-10T18:57:38.384Z", "date_only": false, "value": "2026-11-10T18:57:38.384100Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73101", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-10T18:57:38.384Z", "date_only": false, "value": "2026-11-10T18:57:38.384100Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73101", "record": "FKIE_CVE-2026-73101", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-10T18:58:58.077Z", "date_only": false, "value": "2026-11-10T18:58:58.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T18:58:58.077Z", "date_only": false, "value": "2026-11-10T18:58:58.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73101", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T19:21:21.580Z", "date_only": false, "value": "2026-11-10T19:21:21.580", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73101", "record": "FKIE_CVE-2026-73101", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T14:46:02.240Z", "date_only": false, "value": "2026-11-11T14:46:02.240726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/4q22bhto34w5z", "record": "CVE-2026-73101", "field": "creation_timestamp", "uuid": "ad662b8c-a9b3-4282-9855-5c8f0057a872", "content": "\ud83d\udea8 CVE-2026-73101\nCVSS 10.0 / EPSS 0.43% / KEV: No\nTL;DR: Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal exception class and message to clients\u2026\nhttps://cvesentinel.com/report/CVE-2026-73101\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/4q22bhto34w5z"}], "metrics": {"as_of": "2026-11-12T18:21:34.271Z", "anchors": {"origin": {"timestamp": "2026-11-05T11:52:25.335Z", "date_only": false, "value": "2026-11-05T11:52:25.335Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-05T11:52:25.335Z", "date_only": false, "value": "2026-11-05T11:52:25.335Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 628148.936141, "hours": 174.48581559472223, "days": 7.270242316446759, "min_seconds": 628148.936141, "max_seconds": 628148.936141, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-05T11:52:25.335Z", "date_only": false, "value": "2026-11-05T11:52:25.335Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73101", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T18:21:34.271Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}