CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs Inbound Message-Attribute Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Sprin...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, neuvector-sigstore-interface, flux-image-automation-controller, kine, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks, glab, fulcio, crossplane-provider-aws-route53, skaffold, atlantis, buildah, snyk-cli,...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' due to the lack of an inbound filter rule in Sns2HeaderFilterStrategy. An attacker cannot manipulate internal headers o...

CVE-2026-46456

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...

CVE-2026-46456 Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...

MAL-2023-7957 Malicious code in nequi-aws-sqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ff694733f4579adcceb8730aad479c9eb3d94bdd29c2a1f7e0519810328c30f The OpenSSF Package Analysis project identified 'nequi-aws-sqs' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in nequi-aws-sqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ff694733f4579adcceb8730aad479c9eb3d94bdd29c2a1f7e0519810328c30f The OpenSSF Package Analysis project identified 'nequi-aws-sqs' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system...

CVE-2023-35147

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system...

CVE-2023-35147: Incorrect Permission Assignment for Critical Resource

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system...