at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +269 more potentially affected by CVE-2014-0003 via org.apache.camel:camel-core (>=2.12.0 <=2.12.2)

org.apache.camel:camel-core MAVEN version =2.12.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2014-0003 Source advisory: OSV:GHSA-H6RP-8V4J-HWPH...

GHSA-H6RP-8V4J-HWPH Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

com.bluelock:camel-spring-amqp (>=1.5 <=1.6.3), com.catify.bpmn:bpmn-engine-dist-jpa-camel (=1.1) +448 more potentially affected by CVE-2014-0002 via org.apache.camel:camel-core (>=1.0.0 <=2.11.3)

org.apache.camel:camel-core MAVEN version =1.0.0, =1.5, =0.3.4, =0.4.0 - com.github.microon:microon-services-calendar =0.0 - com.github.rmannibucau:camel-loader =0.0.1 - com.github.rmannibucau:diagram-generator-maven-plugin =0.0.1 and more Source cves: CVE-2014-0002 Source advisory:...

at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +269 more potentially affected by CVE-2014-0002 via org.apache.camel:camel-core (>=2.12.0 <=2.12.2)

org.apache.camel:camel-core MAVEN version =2.12.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2014-0002 Source advisory: OSV:GHSA-2FW5-RVF2-JQ56...

GHSA-2FW5-RVF2-JQ56 Apache Camel's XSLT component allows remote attackers to read arbitrary files

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...

Apache Camel's XSLT component allows remote attackers to read arbitrary files

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...

at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +1432 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=1.0.0 <=2.17.5)

org.apache.camel:camel-core MAVEN version =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2017-5643 Source advisory: OSV:GHSA-VQ9J-JH62-5HMP...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0 <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0 <=0.3.0) +913 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=2.18.0 <=2.18.1)

org.apache.camel:camel-core MAVEN version =2.18.0, =0.2.0, =0.2.0, =2.7, =2.18.0, =2.18.1 - com.tatsuyafw:camel-fluentd =2.18.0 - cool.pandora:acrepo-exts-image =0.0.3 - cool.pandora:pandora-exts-encoder =0.0.4 and more Source cves: CVE-2017-5643 Source advisory: OSV:GHSA-VQ9J-JH62-5HMP...

GHSA-VQ9J-JH62-5HMP Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

Description: The Validation Component of Apache Camel evaluates DTD headers of XML stream sources, although a validation against XML schemas XSD is executed. Remote attackers can use this feature to make Server-Side Request Forgery SSRF attacks by sending XML documents with remote DTDs URLs or XM...

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

Description: The Validation Component of Apache Camel evaluates DTD headers of XML stream sources, although a validation against XML schemas XSD is executed. Remote attackers can use this feature to make Server-Side Request Forgery SSRF attacks by sending XML documents with remote DTDs URLs or XM...

com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (=0.1.0), com.github.camel-labs:camel-labs-iot-cloudlet-geofencing (=0.1.0) +104 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.10.0 <=2.16.4)

org.apache.camel:camel-jackson MAVEN version =2.10.0, =0.1, =0.0.9, =0.0.19, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.5, =1.5, =1.5, =1.5, =1.9.3 - edu.amherst.acdc:acrepo-template-mustache =1.0.0 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...

com.zerotoheroes:hs-draft-odds (>=1.0.0 <=1.0.2), com.zerotoheroes:hs-game-converter (>=1.0.0 <=1.0.12) +32 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.17.0 <=2.17.4)

org.apache.camel:camel-jackson MAVEN version =2.17.0, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.7, =1.1.0, =2.2.105, =2.2.105, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.7 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...

ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0 <=0.7.1), cool.pandora:acrepo-exts-image (=0.0.3) +279 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.18.0 <=2.18.1)

org.apache.camel:camel-jackson MAVEN version =2.18.0, =0.2.0, =1.0.8, =1.0.8, =1.0.10, =1.1.0, =1.0.8, =1.0.8, =1.1.0, =1.0.8, =1.0.8, =1.0.8, =0.0.7, =0.0.7, =0.0.10 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...

GHSA-VVJC-Q5VR-52Q6 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...

org.apache.camel:camel-atmosphere-websocket (=2.16.0), org.apache.camel:camel-example-cxf-tomcat (=2.16.0) +8 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-servlet (=2.16.0)

org.apache.camel:camel-servlet MAVEN version =2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-servlet and may be impacted: - org.apache.camel:camel-atmosphere-websocket =2.16.0 - org.apache.camel:camel-example-cxf-tomcat...

de.wayofquality.blended:blended-camel-utils (>=1.1.2 <=1.1.4), de.wayofquality.blended:blended-karaf-features (>=1.1.2 <=1.1.4) +45 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-servlet (>=2.10.0 <=2.15.4)

org.apache.camel:camel-servlet MAVEN version =2.10.0, =1.1.2, =1.1.2, =0.0.4, =0.0.4, =0.0.3, =0.0.3, =0.0.4, =0.0.3, =0.0.4, =0.0.5 and more Source cves: CVE-2015-5348 Source advisory: OSV:GHSA-26V6-W6FW-RH94...

com.data-artisans:flakka-sample-camel-java_2.10 (=2.3-custom), com.data-artisans:flakka-sample-camel-java_2.11 (=2.3-custom) +36 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (>=1.3.0 <=2.15.2)

org.apache.camel:camel-jetty MAVEN version =1.3.0, =1.0, =2.3.7, =1.0, =2.3.7, =2.1.0, =2.1.0-RC4, =2.1.4, =2.2.0-RC2 and more Source cves: CVE-2015-5348 Source advisory: OSV:GHSA-26V6-W6FW-RH94...

org.apache.camel:camel-atmosphere-websocket (=2.16.0), org.apache.camel:camel-example-cxf (=2.16.0) +19 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-http-common (=2.16.0)

org.apache.camel:camel-http-common MAVEN version =2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http-common and may be impacted: - org.apache.camel:camel-atmosphere-websocket =2.16.0 - org.apache.camel:camel-example-cxf...