2 matches found
CVE-2026-46590: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManager and AwsSecretsManagerKeyLifecycleManager read that metadat...
8.8CVSS6.2AI score0.00839EPSS
SaveExploits1References3
CVE-2026-43867: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. AwsSecretsManagerKeyLifecycleManager.deserializeMetadata reads that metadata back from the...
9.8CVSS6.2AI score0.00926EPSS
SaveExploits1References3
20