Vulnerabilities of Red Hat Red Hat build of Apache Camel for Spring Boot 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-40976 | In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all… | 9.1 Critical | Apr 27, 2026 |
| CVE-2026-40478 | Thymeleaf is a server-side Java template engine for web and standalone environments | 9.1 Critical | Apr 17, 2026 |
| CVE-2026-40477 | Thymeleaf is a server-side Java template engine for web and standalone environments | 9.1 Critical | Apr 17, 2026 |
| CVE-2025-70974 | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key… | 10.0 Critical | Jan 9, 2026 |
| CVE-2025-12543 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | 9.6 Critical | Jan 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433