| CVE-2026-40859 |
Deserialization of Untrusted Data vulnerability in Apache Camel
|
Not rated
|
Jul 6, 2026 |
| CVE-2026-40047 |
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling…
|
Not rated
|
Jul 6, 2026 |
| CVE-2026-47323 |
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative…
|
Not rated
|
May 19, 2026 |
| CVE-2026-27172 |
The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner…
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-33453 |
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel…
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-33454 |
The Camel-Mail component is vulnerable to Camel message header injection
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-40858 |
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote…
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-40860 |
JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the…
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-23552 |
Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak…
|
Not rated
|
Feb 23, 2026 |
| CVE-2025-30177 |
Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions
|
Not rated
|
Apr 1, 2025 |
| CVE-2025-29891 |
Bypass/Injection vulnerability in Apache Camel
|
Not rated
|
Mar 12, 2025 |
| CVE-2025-27636 |
Bypass/Injection vulnerability in Apache Camel components under particular conditions
|
Not rated
|
Mar 9, 2025 |
| CVE-2024-22371 |
Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that…
|
2.9
Low
|
Feb 26, 2024 |
| CVE-2024-23114 |
Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is…
|
Not rated
|
Feb 20, 2024 |
| CVE-2024-22369 |
Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0…
|
Not rated
|
Feb 20, 2024 |
| CVE-2018-8041 |
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal
|
Not rated
|
Sep 17, 2018 |
| CVE-2018-8027 |
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor
|
Not rated
|
Jul 31, 2018 |
| CVE-2017-12634 |
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object…
|
Not rated
|
Nov 15, 2017 |
| CVE-2017-12633 |
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object…
|
Not rated
|
Nov 15, 2017 |
| CVE-2016-8749 |
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
|
Not rated
|
Mar 28, 2017 |
| CVE-2017-5643 |
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE
|
Not rated
|
Mar 16, 2017 |
| CVE-2017-3159 |
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability
|
Not rated
|
Mar 7, 2017 |