Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8Improper input validation vulnerability in Apache Camel Karavan.EPSS 0.4%Oct 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.EPSS 0.5%Oct 9, 2026
- High8.1(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K.EPSS 0.4%May 21, 2026
- Critical9.8Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy…EPSS 1.6%May 19, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.EPSS 7.2%Apr 27, 2026
- High8.8The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Jav…EPSS 1.1%Apr 27, 2026
- High8.8The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream…EPSS 1.2%Apr 27, 2026
- High8.2When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /a…EPSS 1.0%Apr 27, 2026
- Critical9.4The Camel-Mail component is vulnerable to Camel message header injection.EPSS 1.0%Apr 27, 2026
- Critical9.8JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via java…EPSS 1.5%Apr 27, 2026
- High8.8The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter…EPSS 1.1%Apr 27, 2026
- Critical9.9The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out…EPSS 1.9%Apr 27, 2026
- High7.8The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of files in the configured key directory using java.io.ObjectInputStream without applying an…EPSS 0.5%Apr 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component.Feb 23, 2026
- Critical9.1Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.Feb 23, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.EPSS 1.3%Jan 7, 2026
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.EPSS 2.3%Sep 2, 2025
- UnknownApache camel Improper Neutralization of Internal Special ElementsKEVJul 3, 2025
- UnknownApache camel Improper Handling of Case SensitivityKEVApr 7, 2025
22 records · page 1 of 1
PreviousNext