240 matches found
CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
CVE-2026-60093
A relative path traversal vulnerability exists in the Apache Camel camel-azure-storage-datalake component. The downloadToFile operation fails to perform lexical normalization or boundary checks when joining the fileDir endpoint option with remote path names from Azure Data Lake Storage Gen2. This...
CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
EUVD-2026-64954
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
CVE-2026-60093
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
Exploit for CVE-2026-60093
CVE-2026-60093 — camel-azure-storage-datalake downloadToFile...
Exploit for CVE-2026-66906
CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile...
CVE-2026-66906: Relative Path Traversal
Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...
PT-2026-80916
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.x Description A relative path traversal issue exists in the camel-azure-storage-datalake component during the...
CVE-2026-60093: Relative Path Traversal
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
PT-2026-80918
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.9 Description A relative path traversal issue exists in the camel-azure-storage-blob component. The...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: istio, k3s, flannel, prometheus-adapter, rancher-webhook, hubble-ui, kubernetes, timoni, podinfo, kubeflow, gogatekeeper, slsa-verifier, cluster-api-helm-controller, step-issuer, nri-mssql, xeol, go, rabbitmq-cluster-operator, spicedb-operator, opa-envoy,...
GO-2026-6061 vulnerabilities
Vulnerabilities for packages: istio, flannel, prometheus-adapter, apko, gcp-compute-persistent-disk-csi-driver, newrelic-infrastructure-agent, azurefile-csi, slsa-verifier, xeol, rabbitmq-messaging-topology-operator, opa-envoy, metallb, fuse-overlayfs-snapshotter, helm, cortex, blob-csi,...
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: k3s, zot, prometheus-adapter, kubernetes, melange, nats-server, terraform-provider-sendgrid, apko, crossplane-provider-aws, dex, k3d, kubeflow, slsa-verifier, nri-mssql, cadvisor, buildkitd, libssh, kubeflow-pipelines, local-path-provisioner, flux-kustomize-controlle...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: istio, k3s, zot, kubernetes, melange, apko, flux-notification-controller, terraform-provider-tls, rootlesskit, docker, slsa-verifier, neuvector-sigstore-interface, step-issuer, splunk-otel-collector, buildkitd, minio, flux-kustomize-controller,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: flannel, prometheus-adapter, nri-nagios, apko, newrelic-infrastructure-agent, glow, slsa-verifier, rabbitmq-messaging-topology-operator, metallb, fuse-overlayfs-snapshotter, helm, cortex, paranoia, mailpit, crossplane-provider-family-aws, kubebuilder,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: fulcio, k3s, timestamp-authority, vexctl, kubevela, zot, argo-events, step-ca, flux-notification-controller, src-fingerprint, tekton-chains, k3d, ksops, zarf, slsa-verifier, grafana-mimir, neuvector-sigstore-interface, buildkitd, crossplane-provider-family-azure,...
GO-2024-2687 vulnerabilities
Vulnerabilities for packages: flannel, prometheus-adapter, nri-nagios, apko, newrelic-infrastructure-agent, slsa-verifier, rabbitmq-messaging-topology-operator, metallb, fuse-overlayfs-snapshotter, helm, cortex, paranoia, crossplane-provider-family-aws, kubebuilder, kube-fluentd-operator,...
