Apache Software Foundation Apache Camel

• CVE-2026-71569 Medium 4.8 Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name 0.3%
• CVE-2026-90885 High 7.5 Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved 0.6%
• CVE-2026-94386 Medium 4.8 Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache 0.3%
• CVE-2026-95628 Medium 5.4 Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047) 0.3%
• CVE-2026-95629 Medium 5.4 Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory 0.3%
• CVE-2026-95663 Medium 4.8 Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry 0.2%
• CVE-2026-95664 Medium 5.4 Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions 0.8%
• CVE-2026-101259 Medium 5.3 Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions 0.3%
• CVE-2026-88900 High 8.8 Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution 0.7%
• CVE-2026-91858 Medium 6.5 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present 0.3%
• CVE-2026-88901 High 8.2 Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default 0.4%
• CVE-2026-85317 Medium 4.8 Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache 0.5%
• CVE-2026-85316 Medium 4.8 Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching 0.5%
• CVE-2026-85315 Medium 5.3 Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions 0.5%
• CVE-2026-85314 Medium 6.5 Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584) 0.5%
• CVE-2026-85313 Medium 4.3 Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set 0.4%
• CVE-2026-85312 Medium 4.8 Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header 0.5%
• CVE-2026-85300 Medium 5.5 Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions 0.2%
• CVE-2026-85301 Medium 4.8 Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim 0.3%
• CVE-2026-85296 Medium 6.5 Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State 0.7%
• CVE-2026-85260 Medium 5.5 Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default 0.3%
• CVE-2026-85257 Medium 5.3 Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions 0.6%
• CVE-2026-85254 Medium 6.5 Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing 0.7%
• CVE-2026-85251 High 7.5 Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets 0.7%
• CVE-2026-85250 High 7.5 Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option 0.7%
• CVE-2026-85249 Medium 6.5 Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata 0.7%
• CVE-2026-85248 Medium 5.9 Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance 0.4%
• CVE-2026-85247 Medium 5.9 Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore 0.5%
• CVE-2026-85246 Medium 5.3 Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions 0.6%
• CVE-2026-85245 Medium 5.9 Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target 0.5%
• CVE-2026-85243 Medium 5.9 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure 0.4%
• CVE-2026-84181 Medium 5.9 Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse 0.5%
• CVE-2026-84180 Medium 5.3 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions 0.6%
• CVE-2026-84178 Medium 6.1 Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow 0.2%
• CVE-2026-84176 Medium 6.5 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection 0.6%
• CVE-2026-83531 High 8.8 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages 0.9%
• CVE-2026-80344 High 8.2 Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address 0.9%
• CVE-2026-80343 High 8.2 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching 0.9%
• CVE-2026-80312 High 8.2 Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors 0.6%
• CVE-2026-79986 High 7.4 Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 1.0%
• CVE-2026-79985 High 7.4 Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 0.7%
• CVE-2026-79984 High 7.4 Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 0.7%
• CVE-2026-79983 High 7.4 Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside 1.0%
• CVE-2026-78165 High 8.8 Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads 0.7%
• CVE-2026-78164 High 8.2 Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers 0.3%
• CVE-2026-78163 Medium 5.9 Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure 0.5%
• CVE-2026-78162 Critical 10.0 Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) 1.1%
• CVE-2026-78329 Critical 9.8 Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes 0.7%
• CVE-2026-71300 Critical 9.8 Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection 0.7%
• CVE-2026-63621 Medium 5.3 Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy 0.6%