Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the VertxWebsocketConsumer inbound header mapping in components/camel-vertx/camel-vertx-websocket. An attacker can redirect server-side HTTP requests and disclose sensitive values by sending WebSocke...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.0.0-m1, <=3.27.4) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the mapping of externally-supplied message user-headers into the Exchange without applying a header filtering process. An attacker can manipulate internal control headers by injecting specially craft...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the mapping of externally-supplied message user-headers into the Exchange without applying a header filtering process. An attacker can manipulate internal control headers by injecting specially craft...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.31.0, <=3.33.1) +3 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.17.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.17.0, =4.18.1, =3.31.0, =3.31.0, =3.31.0, =4.17.0, =4.18.2 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55994 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821199...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0-m1, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0-m1, =4.7.0, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.17.0, <=4.18.2) potentially affected by CVE-2026-55994 via org.apache.camel:camel-atmosphere-websocket (>=4.17.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.17.0, =4.18.1, =4.17.0, =4.18.2 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821199...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.0.0-m1, <=3.27.4) +3 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites

Summary The vulnerabilities were found in dependent open source libraries used within IBM Quantum Safe Explorer code base. These issues have been addressed by updating the versions of affected libraries. Vulnerability Details CVEID:CVE-2026-9595 DESCRIPTION: Impact: When a user-configured proxy o...