agentprime: apache-software-foundation-apache-camelEvery new CVE for apache-software-foundation-apache-camel.https://agentprime.io/CVE-2026-71569: Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Namehttps://agentprime.io/advisories/CVE-2026-71569/https://agentprime.io/advisories/CVE-2026-71569/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 10:31:01 GMTCVECVE-2026-90885: Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entit…https://agentprime.io/advisories/CVE-2026-90885/https://agentprime.io/advisories/CVE-2026-90885/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:47:03 GMTCVECVE-2026-94386: Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cachehttps://agentprime.io/advisories/CVE-2026-94386/https://agentprime.io/advisories/CVE-2026-94386/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:46:11 GMTCVECVE-2026-95628: Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)https://agentprime.io/advisories/CVE-2026-95628/https://agentprime.io/advisories/CVE-2026-95628/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:48:48 GMTCVECVE-2026-95629: Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directoryhttps://agentprime.io/advisories/CVE-2026-95629/https://agentprime.io/advisories/CVE-2026-95629/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:44:22 GMTCVECVE-2026-95663: Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiryhttps://agentprime.io/advisories/CVE-2026-95663/https://agentprime.io/advisories/CVE-2026-95663/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:42:17 GMTCVECVE-2026-95664: Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressionshttps://agentprime.io/advisories/CVE-2026-95664/https://agentprime.io/advisories/CVE-2026-95664/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:40:32 GMTCVECVE-2026-101259: Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptionshttps://agentprime.io/advisories/CVE-2026-101259/https://agentprime.io/advisories/CVE-2026-101259/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 08:36:47 GMTCVECVE-2026-88900: Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-88900/https://agentprime.io/advisories/CVE-2026-88900/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 11:07:34 GMTCVECVE-2026-91858: Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Presenthttps://agentprime.io/advisories/CVE-2026-91858/https://agentprime.io/advisories/CVE-2026-91858/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:47:48 GMTCVECVE-2026-88901: Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by defaulthttps://agentprime.io/advisories/CVE-2026-88901/https://agentprime.io/advisories/CVE-2026-88901/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:44:07 GMTCVECVE-2026-85317: Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cachehttps://agentprime.io/advisories/CVE-2026-85317/https://agentprime.io/advisories/CVE-2026-85317/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:43:39 GMTCVECVE-2026-85316: Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matchinghttps://agentprime.io/advisories/CVE-2026-85316/https://agentprime.io/advisories/CVE-2026-85316/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:43:00 GMTCVECVE-2026-85315: Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptionshttps://agentprime.io/advisories/CVE-2026-85315/https://agentprime.io/advisories/CVE-2026-85315/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:42:10 GMTCVECVE-2026-85314: Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)https://agentprime.io/advisories/CVE-2026-85314/https://agentprime.io/advisories/CVE-2026-85314/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:41:45 GMTCVECVE-2026-85313: Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Sethttps://agentprime.io/advisories/CVE-2026-85313/https://agentprime.io/advisories/CVE-2026-85313/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:40:58 GMTCVECVE-2026-85312: Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Headerhttps://agentprime.io/advisories/CVE-2026-85312/https://agentprime.io/advisories/CVE-2026-85312/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:40:26 GMTCVECVE-2026-85300: Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissionshttps://agentprime.io/advisories/CVE-2026-85300/https://agentprime.io/advisories/CVE-2026-85300/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:40:04 GMTCVECVE-2026-85301: Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claimhttps://agentprime.io/advisories/CVE-2026-85301/https://agentprime.io/advisories/CVE-2026-85301/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:39:46 GMTCVECVE-2026-85296: Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request Statehttps://agentprime.io/advisories/CVE-2026-85296/https://agentprime.io/advisories/CVE-2026-85296/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:38:11 GMTCVECVE-2026-85260: Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Defaulthttps://agentprime.io/advisories/CVE-2026-85260/https://agentprime.io/advisories/CVE-2026-85260/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:37:42 GMTCVECVE-2026-85257: Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptionshttps://agentprime.io/advisories/CVE-2026-85257/https://agentprime.io/advisories/CVE-2026-85257/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:37:14 GMTCVECVE-2026-85254: Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casinghttps://agentprime.io/advisories/CVE-2026-85254/https://agentprime.io/advisories/CVE-2026-85254/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:36:46 GMTCVECVE-2026-85251: Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targetshttps://agentprime.io/advisories/CVE-2026-85251/https://agentprime.io/advisories/CVE-2026-85251/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:36:09 GMTCVECVE-2026-85250: Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Optionhttps://agentprime.io/advisories/CVE-2026-85250/https://agentprime.io/advisories/CVE-2026-85250/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:35:21 GMTCVECVE-2026-85249: Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadatahttps://agentprime.io/advisories/CVE-2026-85249/https://agentprime.io/advisories/CVE-2026-85249/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:34:39 GMTCVECVE-2026-85248: Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instancehttps://agentprime.io/advisories/CVE-2026-85248/https://agentprime.io/advisories/CVE-2026-85248/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:34:16 GMTCVECVE-2026-85247: Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststorehttps://agentprime.io/advisories/CVE-2026-85247/https://agentprime.io/advisories/CVE-2026-85247/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:33:39 GMTCVECVE-2026-85246: Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptionshttps://agentprime.io/advisories/CVE-2026-85246/https://agentprime.io/advisories/CVE-2026-85246/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:33:16 GMTCVECVE-2026-85245: Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Targethttps://agentprime.io/advisories/CVE-2026-85245/https://agentprime.io/advisories/CVE-2026-85245/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:32:44 GMTCVECVE-2026-85243: Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structurehttps://agentprime.io/advisories/CVE-2026-85243/https://agentprime.io/advisories/CVE-2026-85243/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:32:21 GMTCVECVE-2026-84181: Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reusehttps://agentprime.io/advisories/CVE-2026-84181/https://agentprime.io/advisories/CVE-2026-84181/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:31:41 GMTCVECVE-2026-84180: Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptionshttps://agentprime.io/advisories/CVE-2026-84180/https://agentprime.io/advisories/CVE-2026-84180/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:31:08 GMTCVECVE-2026-84178: Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flowhttps://agentprime.io/advisories/CVE-2026-84178/https://agentprime.io/advisories/CVE-2026-84178/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:30:42 GMTCVECVE-2026-84176: Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflectionhttps://agentprime.io/advisories/CVE-2026-84176/https://agentprime.io/advisories/CVE-2026-84176/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:30:00 GMTCVECVE-2026-83531: Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messageshttps://agentprime.io/advisories/CVE-2026-83531/https://agentprime.io/advisories/CVE-2026-83531/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:29:33 GMTCVECVE-2026-80344: Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Addresshttps://agentprime.io/advisories/CVE-2026-80344/https://agentprime.io/advisories/CVE-2026-80344/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:28:48 GMTCVECVE-2026-80343: Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matchinghttps://agentprime.io/advisories/CVE-2026-80343/https://agentprime.io/advisories/CVE-2026-80343/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:27:58 GMTCVECVE-2026-80312: Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processorshttps://agentprime.io/advisories/CVE-2026-80312/https://agentprime.io/advisories/CVE-2026-80312/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:27:34 GMTCVECVE-2026-79986: Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing en…https://agentprime.io/advisories/CVE-2026-79986/https://agentprime.io/advisories/CVE-2026-79986/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:25:58 GMTCVECVE-2026-79985: Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…https://agentprime.io/advisories/CVE-2026-79985/https://agentprime.io/advisories/CVE-2026-79985/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:16:14 GMTCVECVE-2026-79984: Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entr…https://agentprime.io/advisories/CVE-2026-79984/https://agentprime.io/advisories/CVE-2026-79984/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:15:38 GMTCVECVE-2026-79983: Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…https://agentprime.io/advisories/CVE-2026-79983/https://agentprime.io/advisories/CVE-2026-79983/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:08:43 GMTCVECVE-2026-78165: Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloadshttps://agentprime.io/advisories/CVE-2026-78165/https://agentprime.io/advisories/CVE-2026-78165/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:08:06 GMTCVECVE-2026-78164: Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headershttps://agentprime.io/advisories/CVE-2026-78164/https://agentprime.io/advisories/CVE-2026-78164/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:07:40 GMTCVECVE-2026-78163: Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosurehttps://agentprime.io/advisories/CVE-2026-78163/https://agentprime.io/advisories/CVE-2026-78163/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:07:06 GMTCVECVE-2026-78162: Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)https://agentprime.io/advisories/CVE-2026-78162/https://agentprime.io/advisories/CVE-2026-78162/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:03:57 GMTCVEcritical