Apache Software Foundation Apache Camel
97 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-71569 | 4.21.0 – < 4.22.2 | Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-90885 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Sou… | HIGH 7.5 | 0.6 % | ||
| CVE-2026-94386 | 4.19.0 – < 4.22.2 | Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-95628 | 4.15.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047) | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-95629 | 4.15.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-95663 | 4.16.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by … | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-95664 | 4.8.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions | MEDIUM 5.4 | 0.8 % | ||
| CVE-2026-101259 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.2 | Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-88900 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution | HIGH 8.8 | 0.6 % | ||
| CVE-2026-91858 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Pre… | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-88901 | 4.7.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default | HIGH 8.2 | 0.4 % | ||
| CVE-2026-85317 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-85316 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-85315 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-85314 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-4… | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-85313 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-85312 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-85300 | 4.12.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-85301 | 4.15.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-85296 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-85260 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-85257 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-85254 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-85251 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets | HIGH 7.5 | 0.5 % | ||
| CVE-2026-85250 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option | HIGH 7.5 | 0.6 % | ||
| CVE-2026-85249 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-85248 | 4.12.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-85247 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-85246 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-85245 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-85243 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-84181 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-84180 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-84178 | 4.11.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-84176 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-83531 | 4.4.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages | HIGH 8.8 | 0.9 % | ||
| CVE-2026-80344 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address | HIGH 8.2 | 0.5 % | ||
| CVE-2026-80343 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching | HIGH 8.2 | 0.5 % | ||
| CVE-2026-80312 | 4.11.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors | HIGH 8.2 | 0.6 % | ||
| CVE-2026-79986 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without … | HIGH 7.4 | 0.6 % | ||
| CVE-2026-79985 | 4.2.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constrai… | HIGH 7.4 | 0.7 % | ||
| CVE-2026-79984 | 4.18.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without co… | HIGH 7.4 | 0.7 % | ||
| CVE-2026-79983 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constrai… | HIGH 7.4 | 0.7 % | ||
| CVE-2026-78165 | 2.11.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads | HIGH 8.8 | 0.7 % | ||
| CVE-2026-78164 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers | HIGH 8.2 | 0.3 % | ||
| CVE-2026-78163 | 4.15.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure | MEDIUM 5.9 | 0.5 % | ||
| CVE-2026-78162 | 4.0.0 – < 4.18.5 ; 4.19.0 – < 4.22.1 | Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) | CRITICAL 10.0 | 0.9 % | ||
| CVE-2026-78329 | 4.11.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the … | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-71300 | 4.0.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-63621 | 3.15.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without app… | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-66908 | 4.8.0 – < 4.22.0 | Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud… | HIGH 7.5 | 0.6 % | ||
| CVE-2026-66907 | 4.0.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without con… | HIGH 7.5 | 0.8 % | ||
| CVE-2026-66906 | 4.0.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name withou… | CRITICAL 9.1 | 0.8 % | ||
| CVE-2026-60093 | 4.0.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name withou… | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-59230 | 2.17.0 – < 4.14.9 ; 4.15.0 – < 4.18.4 ; 4.19.0 – < 4.22.0 | Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when … | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-46588 | ≤ 4.14.7 ; 4.15.0 – 4.18.2 ; 4.19.0 – 4.20.0 | Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input | HIGH 7.3 | 0.7 % | ||
| CVE-2026-46587 | ≤ 4.14.7 ; 4.15.0 – 4.18.2 ; 4.19.0 – 4.20.0 | Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input | HIGH 7.3 | 0.7 % | ||
| CVE-2026-49042 | 4.8.0 – 4.18.2 ; 4.19.0 – 4.20.0 | Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters | HIGH 7.3 | 0.7 % | ||
| CVE-2026-43866 | 3.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder | HIGH 7.3 | 0.7 % | ||
| CVE-2026-43867 | 4.18.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream… | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-49365 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack … | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-49098 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypa… | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-49097 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP he… | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-48204 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowi… | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-48203 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP heade… | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-46592 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypa… | HIGH 7.5 | 0.6 % | ||
| CVE-2026-46591 | 4.10.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause wi… | HIGH 8.2 | 0.5 % | ||
| CVE-2026-46590 | 4.18.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.… | HIGH 8.8 | 0.8 % | ||
| CVE-2026-46457 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a… | HIGH 7.5 | 0.7 % | ||
| CVE-2026-46456 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a… | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-46455 | 4.18.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerif… | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-46454 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthen… | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-46453 | 4.3.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, a… | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-43865 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution | HIGH 8.1 | 1.0 % | ||
| CVE-2026-42527 | 4.14.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.21.0 | Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure | HIGH 8.1 | 0.7 % | ||
| CVE-2026-40859 | 4.0.0 – < 4.14.8 ; 4.15.0 – < 4.18.3 ; 4.19.0 – < 4.20.0 | Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is… | HIGH 8.1 | 0.9 % | ||
| CVE-2026-40047 | 4.15.0 – < 4.18.3 | Apache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProd… | CRITICAL 9.1 | 2.4 % | ||
| CVE-2026-47323 | 3.18.0 – < 4.14.6 ; 4.15.0 – < 4.18.2 | Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering | CRITICAL 9.8 | 20 % | ||
| CVE-2026-27172 | 3.0.0 – < 4.14.6 ; 4.15.0 – < 4.18.1 | Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from t… | HIGH 8.8 | 1.2 % | ||
| CVE-2026-33453 | 4.14.0 – 4.14.5 ; 4.18.0 – < 4.18.1 ; 4.19.0 | Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution | CRITICAL 10.0 | 9.2 % | ||
| CVE-2026-33454 | 3.0.0 – < 4.14.6 ; 4.15.0 – < 4.18.1 | Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-… | CRITICAL 9.4 | 1.5 % | ||
| CVE-2026-40858 | 4.0.0 – < 4.14.7 ; 4.15.0 – < 4.18.2 ; 4.19.0 – < 4.20.0 | Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository | HIGH 8.8 | 1.3 % | ||
| CVE-2026-40860 | 3.0.0 – < 4.14.7 ; 4.15.0 – < 4.18.2 ; 4.19.0 – < 4.20.0 | Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp | CRITICAL 9.8 | 1.7 % | ||
| CVE-2026-23552 | 4.15.0 – < 4.18.0 | Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy | CRITICAL 9.1 | 0.6 % | ||
| CVE-2025-30177 | 4.10.0 – < 4.10.3 ; 4.8.0 – < 4.8.6 | Apache Camel: Camel-Undertow Message Header Injection via Improper Filtering | MEDIUM 6.5 | 1.3 % | ||
| CVE-2025-29891 | 4.10.0 – < 4.10.2 ; 4.8.0 – < 4.8.5 ; 3.10.0 – < 3.22.4 | Apache Camel: Camel Message Header Injection through request parameters | MEDIUM 4.8 | 76 % | ||
| CVE-2025-27636 | 4.10.0 – < 4.10.2 ; 4.8.0 – < 4.8.5 ; 3.10.0 – < 3.22.4 | Apache Camel: Camel Message Header Injection via Improper Filtering | MEDIUM 5.6 | 97 % | ||
| CVE-2024-22371 | 3.21.x – 3.21.3 ; 3.22.x – 3.22.0 ; 4.0.x – 4.0.3 ; … | Apache Camel issue on ExchangeCreatedEvent | HIGH 7.5 | 0.7 % | ||
| CVE-2024-23114 | 3.0.0 – < 3.21.4 ; 3.22.0 – < 3.22.1 ; 4.0.0 – < 4.0.4 ; … | Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository | CRITICAL 9.8 | 1.3 % | ||
| CVE-2024-22369 | 3.0.0 – < 3.21.4 ; 3.22.0 – < 3.22.1 ; 4.0.0 – < 4.0.4 ; … | Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository | HIGH 7.8 | 0.7 % | ||
| CVE-2018-8041 | Camel 2.20.0 to 2.20.3, Camel 2.21.0 to 2.21.1 and Camel 2.22.0 | Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal. | MEDIUM 5.3 | 9.6 % | ||
| CVE-2018-8027 | 2.20.0 to 2.20.3 ; 2.21.0 | Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor. | CRITICAL 9.8 | 5.4 % | ||
| CVE-2017-12634 | 2.19.0 to 2.19.3 ; 2.20.0 ; The unsupported Camel 2.x (2.18 and earlier) versions may be also affected. | The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerab | CRITICAL 9.8 | 7.2 % | ||
| CVE-2017-12633 | 2.19.0 to 2.19.3 ; 2.20.0 ; The unsupported Camel 2.x (2.18 and earlier) versions may be also affected. | The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnera | CRITICAL 9.8 | 7.2 % | ||
| CVE-2016-8749 | 2.16.0 to 2.16.4 ; 2.17.0 to 2.17.4 ; 2.18.0 to 2.18.1 ; … | Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks. | CRITICAL 9.8 | 11 % | ||
| CVE-2017-5643 | 2.17.0 to 2.17.5 ; 2.18.0 to 2.18.2 ; The unsupported Camel 2.x (2.16 and earlier) versions may be also affected. | Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. | HIGH 7.4 | 5.9 % | ||
| CVE-2017-3159 | 2.17.0 to 2.17.4 ; 2.18.0 to 2.18.1 ; The unsupported Camel 2.x (2.14 and earlier) versions may be also affected. | Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead | CRITICAL 9.8 | 6.3 % |