org.apache.camel.quarkus:camel-quarkus-aws2-sns (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-aws2-sns-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.19.0, <=4.20.0)

org.apache.camel:camel-aws2-sns MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821196...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821196...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sns MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821196...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56140 Source advisory: GHSA-W2V8-8Q6C-3RHR...

org.apache.camel.quarkus:camel-quarkus-aws2-sns (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-aws2-sns-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.19.0, <=4.20.0)

org.apache.camel:camel-aws2-sns MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56140 Source advisory: OSV:GHSA-W2V8-8Q6C-3RHR...

org.apache.camel.quarkus:camel-quarkus-aws2-sns (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-aws2-sns-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.19.0, <=4.20.0)

org.apache.camel:camel-aws2-sns MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56140 Source advisory: GHSA-W2V8-8Q6C-3RHR...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56140 Source advisory: OSV:GHSA-W2V8-8Q6C-3RHR...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sns MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56140 Source advisory: GHSA-W2V8-8Q6C-3RHR...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sns MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56140 Source advisory: OSV:GHSA-W2V8-8Q6C-3RHR...

Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...

CVE-2026-56140

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...

org.apache.camel.quarkus:camel-quarkus-aws2-sns (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-aws2-sns-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.19.0, <=4.20.0)

org.apache.camel:camel-aws2-sns MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56140 Source advisory: MEND:CVE-2026-56140...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sns MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56140 Source advisory: MEND:CVE-2026-56140...

CVE-2026-56140: Improper Input Validation

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...