org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890714...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890714...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-netty-http (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.14.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890714...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-netty-kafka-connector (>=4.14.0, <=4.14.5) +26 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty (>=4.14.0, <=4.14.7)

org.apache.camel:camel-netty MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.27.4 and more Source cves: CVE-2026-42527https://vulners.com/cve/C...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +14 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0-m1, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-rc2, =3.0.0-rc2, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.27.4 and more Source cves: CVE-2026-40859 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892562https://vulners.com/snyk/...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40859 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892562...

org.apache.camel.springboot:camel-netty-http-starter (4.19.0) potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (4.19.0)

org.apache.camel:camel-netty-http MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-netty-http and may be impacted: - org.apache.camel.springboot:camel-netty-http-starter 4.19.0 Source cves: CVE-2026-40859 Sour...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +14 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0-m1, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-rc2, =3.0.0-rc2, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.27.4 and more Source cves: CVE-2026-49365 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892600https://vulners.com/snyk/...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49365 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892600...

org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49365 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892600...

Information Exposure

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Information Exposure via the muteException handling in the NettyHttpConfiguration and NettyHttpComponent...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

Information Exposure

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Information Exposure in the muteException option handling of the HTTP consumer. An attacker can obtain...

GHSA-42Q5-XW42-XF9G Apache Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to fal...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49365 Source advisory: OSV:GHSA-42Q5-XW42-XF9G...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49365 Source advisory: GHSA-42Q5-XW42-XF9G...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49365 Source advisory: OSV:GHSA-42Q5-XW42-XF9G...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49365 Source advisory: GHSA-42Q5-XW42-XF9G...