CVE-2026-83531 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

CVE-2026-83531

Apache Camel's dynamic-router-control endpoint is vulnerable to Code Injection (CWE-94) and Expression Language Injection (CWE-917). The component improperly takes the subscription predicate and expression language name directly from incoming control messages (via predicate/expressionLanguage fie...

Exploit for CVE-2026-83531

CVE-2026-83531 — camel-dynamic-router: control-endpoint expres...

CVE-2026-83531: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

PT-2026-117485

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The software fails to sufficiently validate user-supplied data, enabling the injection of malicious Expression Language EL code. This flaw allows for the executi...

PT-2026-117340

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

EUVD-2026-102134

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449: Uncontrolled Recursion

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-108334: Improper Neutralization of Special Elements used in an Expression Language Statement

A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...

Security Bulletin: Spring Expression Language (SpEL) in IBM Sterling Control Center makes it vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)

Summary A Critical vulnerability in Spring Framework that allows a safety guard bypass when evaluating Spring Expression Language SpEL expressions using SimpleEvaluationContext with the expression compiler enabled, potentially leading to unauthorized actions or remote code execution; affected...

Exploit for Expression Language Injection in Apache Struts

CVE-2026-1047...

Exploit for Expression Language Injection in Apache Struts

CVE-2026-10471...

Exploit for Expression Language Injection in Apache Struts

CVE-202...

CVE-2026-93879

A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be...

Expression Language Injection

Overview org.hibernate.validator:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Expression Language Injection in the ParameterTermResolver class, whose resolveExpression method converts a message parameter value to a...

CLEANSTART-2026-IR60609 Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS)

Security vulnerability affects the apache-nifi package. Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS...

K000163640: Apache Struts vulnerabilities CVE-2026-104711, CVE-2026-104712, CVE-2026-104713, and CVE-2026-104714

Security Advisory Description CVE-2026-104711 Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject...