GO-2026-5736 vulnerabilities

Vulnerabilities for packages: juicefs, dapr...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: gogatekeeper, golangci-lint, kuma, docker-credential-acr-env, victoriametrics-cluster, delve, jaeger-operator, podinfo, opa-envoy, slsa-verifier, external-secrets-operator, crossplane-provider-aws-sqs, jitsucom-bulker, pulumi-language-java, secrets-store-csi-driver,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, knative-eventing, opa-envoy, external-secrets-operator, kots, external-dns, dgraph, grafana-pyroscope, gitlab-kas, cilium, teleport, envoy-ratelimit, ingress-nginx-controller, amazon-cloudwatch-agent, splunk-otel-collector,...

GHSA-MX64-MJ3Q-7PRJ vulnerabilities

Vulnerabilities for packages: bento-fips, splunk-otel-collector, dapr-fips, opentelemetry-collector-contrib, bento, opentelemetry-collector-contrib-fips, dapr, splunk-otel-collector-fips...

GHSA-W8J3-PQ8G-8M7W vulnerabilities

Vulnerabilities for packages: bento-fips, splunk-otel-collector, dapr-fips, opentelemetry-collector-contrib, bento, opentelemetry-collector-contrib-fips, dapr, splunk-otel-collector-fips...

CVE-2026-46384 vulnerabilities

Vulnerabilities for packages: bento-fips, splunk-otel-collector, dapr-fips, opentelemetry-collector-contrib, bento, opentelemetry-collector-contrib-fips, dapr, splunk-otel-collector-fips...

CVE-2026-46385 vulnerabilities

Vulnerabilities for packages: bento-fips, splunk-otel-collector, dapr-fips, opentelemetry-collector-contrib, bento, opentelemetry-collector-contrib-fips, dapr, splunk-otel-collector-fips...

GHSA-MC57-H6J3-3HMV vulnerabilities

Vulnerabilities for packages: bento-fips, splunk-otel-collector, dapr-fips, opentelemetry-collector-contrib, bento, opentelemetry-collector-contrib-fips, dapr, splunk-otel-collector-fips...

GHSA-MC57-H6J3-3HMV vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, opentelemetry-collector-contrib, dapr...

GHSA-MX64-MJ3Q-7PRJ vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, opentelemetry-collector-contrib, dapr...

CVE-2026-46384 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, opentelemetry-collector-contrib, dapr...

GHSA-W8J3-PQ8G-8M7W vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, opentelemetry-collector-contrib, dapr...

CVE-2026-46385 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, opentelemetry-collector-contrib, dapr...

The vulnerability of the DaprPubSubConsumer class in the camel-dapr component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

Exploit for Confused Deputy in Apache Camel

camel-dapr Consumer Routing-Header Override / Confused Deputy...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the DaprPubSubConsumer process. An attacker can redirect or exfiltrate messages and bypass intended routing and topic-level access controls by publishing specially crafted CloudEvents with manipulated...

CVE-2026-49086

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

CVE-2026-49086 Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

EUVD-2026-41842

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

CVE-2026-49086 Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...