433 matches found
CVE-2026-42577 vulnerabilities
Vulnerabilities for packages: kayenta-fips, akhq, keycloak-fips, zookeeper-fips, celeborn, zipkin, kafbat-ui-fips, s3proxy-fips, management-api-for-apache-cassandra-5.0, localstack, management-api-for-apache-cassandra-4.0, cassandra, seata, apache-pulsar-fips, spark, hono, camunda-zeebe, keycloak...
CVE-2026-41417 vulnerabilities
Vulnerabilities for packages: wildfly, druid, apache-activemq-artemis, sonarqube, celeborn, thingsboard, apache-pulsar, docker-selenium, akhq, apache-nifi-registry, trino, spark, infinispan, keycloak, wavefront-proxy, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, zipkin,...
GHSA-V8H7-RR48-VMMV vulnerabilities
Vulnerabilities for packages: wildfly, druid, apache-activemq-artemis, sonarqube, celeborn, thingsboard, apache-pulsar, docker-selenium, akhq, apache-nifi-registry, trino, spark, infinispan, keycloak, wavefront-proxy, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, zipkin,...
GHSA-V8H7-RR48-VMMV vulnerabilities
Vulnerabilities for packages: kayenta-fips, akhq, keycloak-fips, celeborn, elasticsearch-fips, sonarqube, zipkin, kafbat-ui-fips, reposilite, management-api-for-apache-cassandra-5.0, localstack, opensearch, apache-camel-karavan-devmode, management-api-for-apache-cassandra-4.0, opensearch-fips,...
CVE-2026-41417 vulnerabilities
Vulnerabilities for packages: kayenta-fips, akhq, keycloak-fips, celeborn, elasticsearch-fips, sonarqube, zipkin, kafbat-ui-fips, reposilite, management-api-for-apache-cassandra-5.0, localstack, opensearch, apache-camel-karavan-devmode, management-api-for-apache-cassandra-4.0, opensearch-fips,...
CVE-2026-40858
A flaw was found in the camel-infinispan component of Apache Camel. A remote attacker, with the ability to write to the Infinispan cache, can inject a specially crafted serialized Java object. When this object is deserialized during normal aggregation repository operations, it can lead to arbitra...
GHSA-4XWX-HVV7-7PRJ Apache Camel-Infinispan Component Vulnerable to Deserialization of Untrusted Data
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
Apache Camel-Infinispan Component Vulnerable to Deserialization of Untrusted Data
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the DefaultExchangeHolderUtils.deserialize function in ProtoStream-based remote aggregation repository. An attacker can achieve arbitrary code execution by injecting a crafted serialized Java object...
CVE-2026-40858
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
EUVD-2026-25808
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
CVE-2026-40858
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
CVE-2026-40858 Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
CVE-2026-40858 Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
CVE-2026-40858
CVE-2026-40858 – Apache Camel: Camel-Infinispan insecure deserialization The camel-infinispan component’s ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without ObjectInputFilter. An attacker who can write to t...
CVE-2026-40858 Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a...
Apache Camel 代码问题漏洞
Apache Camel is an open-source integration framework based on the Enterprise Integration Pattern EIP, developed by the Apache Foundation in the United States. This framework provides implementations of Java objects following the EIP pattern, and routing and mediation rules are configured through...
PT-2026-35386
Name of the Vulnerable Software and Affected Versions Apache Camel camel-infinispan affected versions not specified Description The DefaultExchangeHolderUtils.deserialize function in the camel-infinispan component contains a flaw in its deserialization mechanism. Specifically, the ProtoStream-bas...
EUVD-2026-24738
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
camel-infinispan Vulnerable to Deserialization of Untrusted Data
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...