org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: OSV:GHSA-MRRP-9GJM-749V...

Apache Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...

GHSA-RP9M-HFV5-PFVR Apache Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...

org.apache.camel.karaf:camel-elasticsearch-rest-client (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.8.0, <=3.27.4) +3 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.3.0, <=4.14.7)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.3.0, =4.7.0, =3.8.0, =3.8.0, =3.8.0, =4.3.0, =4.14.7 Source cves: CVE-2026-46453 Source advisory: GHSA-RP9M-HFV5-PFVR...

org.apache.camel.karaf:camel-elasticsearch-rest-client (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.8.0, <=3.27.4) +3 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.3.0, <=4.14.7)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.3.0, =4.7.0, =3.8.0, =3.8.0, =3.8.0, =4.3.0, =4.14.7 Source cves: CVE-2026-46453 Source advisory: OSV:GHSA-RP9M-HFV5-PFVR...

org.apache.camel.karaf:camel-elasticsearch-rest-client (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.15.0, <=4.18.2)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46453 Source advisory: OSV:GHSA-RP9M-HFV5-PFVR...

org.apache.camel.karaf:camel-elasticsearch-rest-client (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.15.0, <=4.18.2)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46453 Source advisory: GHSA-RP9M-HFV5-PFVR...

org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.19.0, <=4.20.0)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46453 Source advisory: OSV:GHSA-RP9M-HFV5-PFVR...

org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-elasticsearch-rest-client-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46453 via org.apache.camel:camel-elasticsearch-rest-client (>=4.19.0, <=4.20.0)

org.apache.camel:camel-elasticsearch-rest-client MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46453 Source advisory: GHSA-RP9M-HFV5-PFVR...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false,...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false,...

CVE-2026-49099 Apache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component. The camel-salesforce producer resolves its operation parameters - the SOQL query, the SOSL search,...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-cxf (>=4.0.0, <=4.14.5) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-rest MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =4.7.0, =4.7.0, =4.10.7, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-cxf (4.18.0) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cxf-rest MAVEN version =4.15.0, =4.18.1, =4.18.1, =4.18.1, =4.18.1, =4.15.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

PYSEC-2026-804 Django REST framework XSS Vulnerability

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

abaci-users (0.1.0), burl (1.0.0) +81 more potentially affected by CVE-2018-25045 via django-rest-framework (0.1.0)

django-rest-framework PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-rest-framework and may be impacted: - abaci-users 0.1.0 - burl 1.0.0 - coopstarter-data =0.1.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.4, =0.5.0,...

CVE-2026-46453 Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...

CVE-2026-46453

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...

CVE-2026-46453 Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...