Advisories · Technology
Apache Software Foundation Apache Camel.
Every CVE that names Apache Software Foundation Apache Camel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name
- Apache Software Foundation Apache Camel
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entit…
- Apache Software Foundation Apache Camel
- XML external entities (XXE)
- CVSS 4.8 Medium
Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache
- Apache Software Foundation Apache Camel
- CWE-524
- CVSS 5.4 Medium
Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 5.4 Medium
Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 4.8 Medium
Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry
- Apache Software Foundation Apache Camel
- Authentication bypass
- CVSS 5.4 Medium
Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions
- Apache Software Foundation Apache Camel
- Code injection
- CVSS 5.3 Medium
Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 8.8 High
Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
- Apache Software Foundation Apache Camel
- Insecure deserialization
- CVSS 6.5 Medium
Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present
- Apache Software Foundation Apache Camel
- XML external entities (XXE)
- CVSS 8.2 High
Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default
- Apache Software Foundation Apache Camel
- XML external entities (XXE)
- CVSS 4.8 Medium
Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache
- Apache Software Foundation Apache Camel
- CWE-524
- CVSS 4.8 Medium
Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching
- Apache Software Foundation Apache Camel
- CWE-1220
- CVSS 5.3 Medium
Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 6.5 Medium
Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)
- Apache Software Foundation Apache Camel
- CWE-20
- CVSS 4.3 Medium
Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set
- Apache Software Foundation Apache Camel
- CWE-942
- CVSS 4.8 Medium
Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header
- Apache Software Foundation Apache Camel
- CWE-20
- CVSS 5.5 Medium
Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
- Apache Software Foundation Apache Camel
- Broken access control
- CVSS 4.8 Medium
Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim
- Apache Software Foundation Apache Camel
- Authentication bypass
- CVSS 6.5 Medium
Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State
- Apache Software Foundation Apache Camel
- CWE-488
- CVSS 5.5 Medium
Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 5.3 Medium
Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 6.5 Medium
Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing
- Apache Software Foundation Apache Camel
- CWE-178
- CVSS 7.5 High
Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 7.5 High
Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option
- Apache Software Foundation Apache Camel
- XML external entities (XXE)
- CVSS 6.5 Medium
Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata
- Apache Software Foundation Apache Camel
- CWE-20
- CVSS 5.9 Medium
Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance
- Apache Software Foundation Apache Camel
- Race condition
- CVSS 5.9 Medium
Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore
- Apache Software Foundation Apache Camel
- Weak cryptography or TLS
- CVSS 5.3 Medium
Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 5.9 Medium
Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target
- Apache Software Foundation Apache Camel
- CWE-488
- CVSS 5.9 Medium
Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure
- Apache Software Foundation Apache Camel
- CWE-354
- CVSS 5.9 Medium
Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse
- Apache Software Foundation Apache Camel
- Authentication bypass
- CVSS 5.3 Medium
Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions
- Apache Software Foundation Apache Camel
- Information disclosure
- CVSS 6.1 Medium
Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow
- Apache Software Foundation Apache Camel
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection
- Apache Software Foundation Apache Camel
- CWE-942
- CVSS 8.8 High
Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
- Apache Software Foundation Apache Camel
- Code injection
- CVSS 8.2 High
Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address
- Apache Software Foundation Apache Camel
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching
- Apache Software Foundation Apache Camel
- CWE-178
- CVSS 8.2 High
Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors
- Apache Software Foundation Apache Camel
- Authentication bypass
- CVSS 7.4 High
Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing en…
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 7.4 High
Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 7.4 High
Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entr…
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 7.4 High
Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…
- Apache Software Foundation Apache Camel
- Path traversal
- CVSS 8.8 High
Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads
- Apache Software Foundation Apache Camel
- Insecure deserialization
- CVSS 8.2 High
Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
- Apache Software Foundation Apache Camel
- Information disclosure
- Code injection
- CVSS 5.9 Medium
Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure
- Apache Software Foundation Apache Camel
- Path traversal
- Information disclosure
- CVSS 10.0 CriticalCritical · CVSS 9+
Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)
- Apache Software Foundation Apache Camel
- Insecure deserialization