CVE-2026-84180

CVE-2026-84180 — camel-knative: HTTP consumer information disclosure exception written back to the caller Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Knative HTTP consumer , when an exchange failed on the consumer side, wrote the resulting exception back to t...

CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Style ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-knative 4.18.2|...

CVE-2026-85247

CVE-2026-85247 — camel-knative: improper certificate validation TLS on turns validation off Runnable proof-of-concept reproducer for the Apache Camel vulnerability where enabling SSL on the Knative HTTP client without configuring a truststore fell back to trusting every presented certificate rath...

Apache Camel camel-knative 4.22.0 Improper Certificate Validation

Apache Camel camel-knative version 4.22.0 contains an improper certificate validation issue that causes the Knative HTTP client to trust all certificates when SSL is enabled without a truststore. The supplied proof of concept demonstrates acceptance of a self-signed local server certificate...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429356...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430453...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +8 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-api (>=4.19.0, <=4.22.0)

org.apache.camel:camel-knative-api MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430452...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +7 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative (>=4.19.0, <=4.22.0)

org.apache.camel:camel-knative MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430451...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +23 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-api (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-api MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and more Sou...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the KnativeHttpConsumer in the camel-knative HTTP consumer. An external sender can trigger a consumer-side route failure by sending a request that causes exchange processing to fail, then read the exception clas...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the KnativeHttpConsumer in the camel-knative HTTP consumer. An external sender can trigger a consumer-side route failure by sending a request that causes exchange processing to fail, then read the exception clas...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the KnativeHttpConsumer in the camel-knative HTTP consumer. An external sender can trigger a consumer-side route failure by sending a request that causes exchange processing to fail, then read the exception clas...

Exploit for CVE-2026-85247

CVE-2026-85247 — camel-knative: improper certificate validatio...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...