Malicious code in api-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d0da039c634a51a2056c9438668b8de32a327f0ea40c62b081f780027980780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1038 Malicious code in api-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d0da039c634a51a2056c9438668b8de32a327f0ea40c62b081f780027980780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.apache.camel:camel-jbpm (>=2.23.0 <=3.0.0-M2), org.apache.camel:camel-jbpm-starter (>=2.23.0 <=3.0.0-M2) +113 more potentially affected by CVE-2016-7043 via org.kie.server:kie-server-common (>=7.0.0.Beta3 <=7.20.0.Final)

org.kie.server:kie-server-common MAVEN version =7.0.0.Beta3, =2.23.0, =2.23.0, =7.14.0.Final, =7.16.0.Final, =7.10.0.Final, =7.10.0.Final, =7.0.0.Beta3, =7.0.0.Beta3, =7.0.0.Beta3, =7.0.0.Beta3, =7.0.0.Beta3, =7.0.0.Beta3, =7.0.0.Beta5 and more Source cves: CVE-2016-7043 Source advisory:...

org.apache.axis2:axis2-integration (=1.4), org.apache.camel:camel-example-cxf (>=1.2.0 <=1.3.0) +3 more potentially affected by CVE-2012-6551 via org.apache.activemq:apache-activemq (>=4.1.1 <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring =1.2.0 - org.apache.camel:camel-example-spring-xquery =1.3.0 Source cves: CVE-2012-6551 Source advisory: OSV:GHSA-34FP-XVXP-RG22...

org.apache.activemq:apache-activemq (>=4.1.1 <=5.19.7), org.apache.axis2:axis2-integration (=1.4) +4 more potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (>=4.1.1 <=5.7.0)

org.apache.activemq:activemq-web-demo MAVEN version =4.1.1, =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring =1.2.0 - org.apache.camel:camel-example-spring-xquery =1.3.0 Source cves: CVE-2012-6551 Source advisory: OSV:GHSA-34FP-XVXP-RG22...

com.liferay:com.liferay.portal.store.jcr (>=1.0.0 <=2.0.3), com.squeakysand.jcr:squeakysand-jcr-taglib-test (>=0.2.0 <=0.4.0) +8 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (>=2.2.0 <=2.2.13)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.2.0, =1.0.0, =0.2.0, =0.2.0, =2.10.0, =2.2.0, =2.2.0, =1.2.0-cr4, =1.2.0-cr8 Source cves: CVE-2015-1833 Source advisory: OSV:GHSA-9284-J4C9-779Q...

org.apache.activemq:apache-activemq (>=5.0.0 <=5.19.7), org.apache.axis2:axis2-integration (=1.4) +4 more potentially affected by CVE-2010-1587 via org.apache.activemq:activemq-web-console (>=5.0.0 <=5.3.0)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.0.0, =5.19.7 - org.apache.axis2:axis2-integration =1.4 - org.apache.camel:camel-example-cxf =1.3.0 - org.apache.camel:camel-example-jms-file =1.3.0 - org.apache.camel:camel-example-spring-xquery =1.3.0 -...

org.apache.camel:camel-hessian-starter (=2.20.0) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (=2.20.0)

org.apache.camel:camel-hessian MAVEN version =2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-hessian and may be impacted: - org.apache.camel:camel-hessian-starter =2.20.0 Source cves: CVE-2017-12633 Source advisory:...

org.apache.camel:camel-hessian-starter (>=2.18.0 <=2.19.3) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (>=2.18.0 <=2.19.3)

org.apache.camel:camel-hessian MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12633 Source advisory: OSV:GHSA-5WHJ-523X-6J68...

Apache Camel camel-hessian component vulnerable to Java object deserialization

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

GHSA-5WHJ-523X-6J68 Apache Camel camel-hessian component vulnerable to Java object deserialization

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

com.fluxcorp.plugins:webservice-trigger (=1.0.4), com.googlecode.xades4j:xades4j (=1.3.1) +206 more potentially affected by CVE-2013-5823 via org.apache.santuario:xmlsec (>=1.5.1 <=1.5.2)

org.apache.santuario:xmlsec MAVEN version =1.5.1, =1.6.0-p41, =1.0.0, =0.16, =0.16, =2.8.6, =2.10.0, =1.0.1, =1.0.1, =1.0.1, =1.0.2 - org.apache.cxf.fediz.examples:simpleWebapp =1.0.0 and more Source cves: CVE-2013-5823 Source advisory: OSV:GHSA-8GWC-X7MG-7P7P...

org.apache-extras.camel-extra:camel-esper (=2.12.0), org.apache-extras.camel-extra:camel-esper-demo (=2.12.0) +215 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (=2.12.0)

org.apache.camel:camel-core MAVEN version =2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache-extras.camel-extra:camel-esper =2.12.0 - org.apache-extras.camel-extra:camel-esper-demo...

com.bluelock:camel-spring-amqp (>=1.5 <=1.6.1), com.github.jknack:mwa-camel (=0.4.0) +208 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.11.0 <=2.11.1)

org.apache.camel:camel-core MAVEN version =2.11.0, =1.5, =1.0.0, =5.14, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 and more Source cves: CVE-2013-4330 Source advisory: OSV:GHSA-X9FV-C87W-55WC...

at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +2755 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=1.0.0 <=2.9.6)

org.apache.camel:camel-core MAVEN version =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2013-4330 Source advisory: OSV:GHSA-X9FV-C87W-55WC...

com.catify.bpmn:bpmn-engine-dist-jpa-camel (=1.1), com.catify.bpmn:integration-spi-camel (=1.1) +320 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.10.0 <=2.10.6)

org.apache.camel:camel-core MAVEN version =2.10.0, =0.3.4, =5.8.0-NESS-1, =1.5.1, =1.6.0 and more Source cves: CVE-2013-4330 Source advisory: OSV:GHSA-X9FV-C87W-55WC...

Improper Control of Generation of Code in Apache Camel

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple" in a CamelFileName message header to a 1 FILE or 2 FTP producer...

GHSA-X9FV-C87W-55WC Improper Control of Generation of Code in Apache Camel

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple" in a CamelFileName message header to a 1 FILE or 2 FTP producer...

org.apache.camel:camel-cxf (>=2.9.0 <=2.9.0-RC1), org.apache.camel:camel-example-cxf (>=2.9.0 <=2.9.0-RC1) +117 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.5.0 <=2.5.1)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.5.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.5.0, =2.5.0, =2.5.0, =2.5.0, =2.5.1 and more Source cves: CVE-2012-5575 Source advisory: OSV:GHSA-7V5V-9V8R-W864...

org.apache.camel:camel-cxf (>=2.9.0 <=2.9.0-RC1), org.apache.camel:camel-example-cxf (>=2.9.0 <=2.9.0-RC1) +31 more potentially affected by CVE-2013-2160 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.5.0 <=2.5.1)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.5.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.5.0, =2.5.0, =2.5.0, =2.5.0, =2.5.1 and more Source cves: CVE-2013-2160 Source advisory: OSV:GHSA-254Q-RP36-V2M8...