EUVD-2026-112721

Server-Side Request Forgery SSRF vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an IP literal was matched against a list of...

CVE-2026-71569

Server-Side Request Forgery SSRF vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an IP literal was matched against a list of...

io.dscope.camel:ag-ui-yaml-service (1.0.0), io.dscope.camel:camel-a2a-component (1.1.0) +8 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-undertow (>=4.15.0, <=4.18.2)

org.apache.camel:camel-undertow MAVEN version =4.15.0, =1.3.0, =4.18.1, =4.15.0, =4.15.0, =4.15.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874452...

io.dscope.camel:ag-ui-yaml-service (1.0.0), io.dscope.camel:camel-a2a-component (1.1.0) +8 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-undertow (>=4.15.0, <=4.18.2)

org.apache.camel:camel-undertow MAVEN version =4.15.0, =1.3.0, =4.18.1, =4.15.0, =4.15.0, =4.15.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56139 Source advisory: OSV:GHSA-HJG2-F45W-C566...