org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-49365 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49365 Source advisory: MEND:CVE-2026-49365...

CVE-2026-49365 Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to fal...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-netty-http (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.14.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.18.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

CVE-2026-42527

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-40859 Source advisory: MEND:CVE-2026-40859...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40859 Source advisory: MEND:CVE-2026-40859...

org.apache.camel.springboot:camel-netty-http-starter (4.19.0) potentially affected by CVE-2026-40859 via org.apache.camel:camel-netty-http (4.19.0)

org.apache.camel:camel-netty-http MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-netty-http and may be impacted: - org.apache.camel.springboot:camel-netty-http-starter 4.19.0 Source cves: CVE-2026-40859 Sour...

PT-2026-55907

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description The camel-netty-http server consumer in Apache Camel contains an issue where the muteException optio...

CVE-2026-49365: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to fal...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (0.1.0), org.apache.camel.kafkaconnector:camel-netty-kafka-connector (0.1.0) +19 more potentially affected by CVE-2020-11973 via org.apache.camel:camel-netty (>=3.0.0, <=3.1.0)

org.apache.camel:camel-netty MAVEN version =3.0.0, =1.0.0-m1, =1.0.0-m3, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =3.0.0, =3.1.0 and more Source cves: CVE-2020-11973https://vulners.com/c...