io.github.luigidemasi:camel-jbang-plugin-kit (0.4.0), io.kaoto.forage:camel-jbang-plugin-forage (>=1.5.0, <=1.6.0) +21 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-vertx-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-vertx-http MAVEN version =4.19.0, =1.5.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429515https://vulners.com/snyk/SNYK...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.4.1) +22 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-vertx-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-vertx-http MAVEN version =4.0.0, =0.3.0, =1.0, =1.0, =4.0.0, =4.7.0, =3.2.0, =3.33.0, =3.33.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.0.0, =4.18.0, =4.18.4 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429515https...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data

A flaw was found in the camel-vertx-http component of Apache Camel. This vulnerability, a Deserialization of Untrusted Data, could allow a remote attacker to execute arbitrary code. By controlling the backend server or acting as a man-in-the-middle, an attacker could send a specially crafted...

Deserialization Of Untrusted Data

Apache Camel is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the camel-vertx-http component deserializing attacker-controlled Java objects without an ObjectInputFilter when transferException or allowJavaSerializedObject is enabled, which allows an attacker...

org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data

A flaw was found in the camel-vertx-http component of Apache Camel. This vulnerability, a Deserialization of Untrusted Data, could allow a remote attacker to execute arbitrary code. By controlling the backend server or acting as a man-in-the-middle, an attacker could send a specially crafted...

CVE-2026-40859

A flaw was found in the camel-vertx-http component of Apache Camel. This vulnerability, a Deserialization of Untrusted Data, could allow a remote attacker to execute arbitrary code. By controlling the backend server or acting as a man-in-the-middle, an attacker could send a specially crafted...

io.kaoto.forage:camel-jbang-plugin-forage (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0) +18 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-vertx-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 and more Source cves: CVE-2026-42527 Source advisory:...

org.apache.camel.kafkaconnector:camel-azure-functions-sink-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.karaf:camel-vertx-http (>=4.14.5, <=4.14.7) +12 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-vertx-http (>=4.14.0, <=4.14.7)

org.apache.camel:camel-vertx-http MAVEN version =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890715...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.3) +20 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-vertx-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-http MAVEN version =4.15.0, =0.3.0, =1.0, =1.0, =4.18.1, =3.29.0, =3.33.0, =3.33.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.15.0, =4.18.0, =4.15.0, =4.18.2 and more Source cves: CVE-2026-42527 Source advisory:...

org.apache.camel.kafkaconnector:camel-azure-functions-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.karaf:camel-vertx-http (>=4.7.0, <=4.14.7) +15 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-vertx-http MAVEN version =4.0.0-m1, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-rc2, =3.0.0-rc2, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.12.0, =4.7.0, =4.4.0, =4.8.0, =4.14.0, =4.14.7 and more Source cves: CVE-2026-40859 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-178...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.3) +20 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-http MAVEN version =4.15.0, =0.3.0, =1.0, =1.0, =4.18.1, =3.29.0, =3.33.0, =3.33.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.15.0, =4.18.0, =4.15.0, =4.18.2 and more Source cves: CVE-2026-40859 Source advisory:...

org.apache.camel.springboot:camel-vertx-http-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +11 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (4.19.0)

org.apache.camel:camel-vertx-http MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-vertx-http and may be impacted: - org.apache.camel.springboot:camel-vertx-http-starter 4.19.0 -...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ObjectInputFilter VertxHttpHelper.deserializeJavaObjectFromStream and NettyHttpHelper.deserializeJavaObjectFromStream. An attacker can achieve remote code execution on a Camel application host b...

org.apache.camel.kafkaconnector:camel-azure-functions-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.karaf:camel-vertx-http (>=4.7.0, <=4.14.7) +14 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-vertx-http MAVEN version =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.0.0, =4.12.0, =4.7.0, =4.4.0, =4.8.0, =4.14.0, =4.0.0, =4.14.7 and more Source cves: CVE-2026-40859 Source advisory: OSV:GHSA-6QW3-4796-5984...

org.apache.camel.kafkaconnector:camel-azure-functions-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.karaf:camel-vertx-http (>=4.7.0, <=4.14.7) +14 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-vertx-http MAVEN version =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.0.0, =4.12.0, =4.7.0, =4.4.0, =4.8.0, =4.14.0, =4.0.0, =4.14.7 and more Source cves: CVE-2026-40859 Source advisory: GHSA-6QW3-4796-5984...

org.apache.camel.springboot:camel-vertx-http-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +11 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (4.19.0)

org.apache.camel:camel-vertx-http MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-vertx-http and may be impacted: - org.apache.camel.springboot:camel-vertx-http-starter 4.19.0 -...

org.apache.camel.springboot:camel-vertx-http-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +11 more potentially affected by CVE-2026-40859 via org.apache.camel:camel-vertx-http (4.19.0)

org.apache.camel:camel-vertx-http MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-vertx-http and may be impacted: - org.apache.camel.springboot:camel-vertx-http-starter 4.19.0 -...