CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, crossplane-provider-keycloak, gitness, nuclei, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-cloudfront, crossplane-provider-family-azure,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: helm, cluster-proportional-autoscaler, kubo, metrics-server, aws-nuke, docker-machine-driver-linode, guac, consul-k8s, policy-controller, docker-credential-acr-env, controller-gen, litestream, go, cert-manager-webhook-pdns, tetragon,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: helm, podman, crossplane-provider-keycloak, melange, gh, docker-machine-driver-linode, guac, nfpm, kargo, policy-controller, tkn, cloudflared, crossplane-provider-family-azure, chisel, crossplane-provider-aws-kinesis, kine, vault-benchmark, loki, argo-events,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm, kor, helm-operator, kubo, spegel, k8sgateway, docker-machine-driver-linode, guac, kubelet-csr-approver, nri-redis, policy-controller, git-sync, litestream, tetragon, sriov-network-device-plugin, cluster-api-ipam-provider-in-cluster, podinfo, langfuse, swagger,...

Improper Input Validation

Apache Camel AWS SNS component is vulnerable to Improper Input Validation. The vulnerability is due to the absence of an inbound header-filtering rule in Sns2HeaderFilterStrategy, which could theoretically allow externally supplied message attributes to be mapped into Camel control headers;...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821196...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56140 Source advisory: GHSA-W2V8-8Q6C-3RHR...

CVE-2026-56140

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...

ROOT-APP-MAVEN-CVE-2026-44308 CVE-2026-44308 in io.root.io.awspring.cloud:spring-cloud-aws-sns - Patched by Root

Root has patched CVE-2026-44308 in the io.root.io.awspring.cloud:spring-cloud-aws-sns package for Root:Maven. Multiple fixed versions available...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: MEND:CVE-2026-44308...

com.limemojito.oss.spring-boot:aws-utilities (>=11.0.0, <=12.0.7), com.limemojito.oss.standards:aws-utilities (>=13.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=3.0.0, <=3.4.2)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =3.0.0, =11.0.0, =13.0.0, =3.2.0-m1, =3.0.0, =0.16.0, =1.1.0, =0.0.1, =2.1.0, =2.0.0-beta-17, =7.0.0-beta Source cves: CVE-2026-44308 Source advisory: GHSA-R4W4-WV68-QV85...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0-m1, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0-m1, =0.4.0, =0.4.0, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: SNYK:JAVA-IOAWSPRINGCLOUD-16799818...

com.limemojito.oss.spring-boot:aws-utilities (>=11.0.0, <=12.0.7), com.limemojito.oss.standards:aws-utilities (>=13.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=3.0.0, <=3.4.2)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =3.0.0, =11.0.0, =13.0.0, =3.2.0-m1, =3.0.0, =0.16.0, =1.1.0, =0.0.1, =2.1.0, =2.0.0-beta-17, =7.0.0-beta Source cves: CVE-2026-44308 Source advisory: OSV:GHSA-R4W4-WV68-QV85...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: OSV:GHSA-R4W4-WV68-QV85...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: GHSA-R4W4-WV68-QV85...