438 matches found
PT-2026-35386
Name of the Vulnerable Software and Affected Versions Apache Camel camel-infinispan affected versions not specified Description The DefaultExchangeHolderUtils.deserialize function in the camel-infinispan component contains a flaw in its deserialization mechanism. Specifically, the ProtoStream-bas...
Apache Camel 代码问题漏洞
Apache Camel is an open-source integration framework based on the Enterprise Integration Pattern EIP, developed by the Apache Foundation in the United States. This framework provides implementations of Java objects following the EIP pattern, and routing and mediation rules are configured through...
EUVD-2026-24738
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
camel-infinispan Vulnerable to Deserialization of Untrusted Data
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
GHSA-XFXP-PPX7-CQRP camel-infinispan Vulnerable to Deserialization of Untrusted Data
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
CVE-2026-6857 Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
CVE-2026-6857 Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
CVE-2026-6857 Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
CVE-2026-6857
CVE-2026-6857 affects camel-infinispan via unsafe deserialization in the ProtoStream remote aggregation repository. The flaw allows a remote attacker with low privileges to send crafted data to trigger arbitrary code execution, potentially gaining full control over the affected system and impacti...
CVE-2026-6857
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
CVE-2026-6857
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...
Apache camel-infinispan 代码问题漏洞
Apache Camel-Infinispan is a distributed caching and data grid integration component developed by the Apache Foundation. There are code-related vulnerabilities in Apache Camel-Infinispan. These vulnerabilities stem from insecure deserialization in the ProtoStream remote aggregation repository. A...
PT-2026-34329
Name of the Vulnerable Software and Affected Versions camel-infinispan affected versions not specified Description Unsafe deserialization exists in the ProtoStream remote aggregation repository. A remote attacker with low privileges can send specially crafted data to achieve arbitrary code...
CVE-2026-34480 vulnerabilities
Vulnerabilities for packages: kafka, lmcache-cuda-12.8, apache-tika, zipkin, druid, elasticsearch-fips, logstash, spark, kafka-fips, apache-activemq, kafka-bridge, pinot, spark-kubernetes-operator, infinispan, sonarqube, pinot-fips, opensearch-fips, elasticsearch, apache-activemq-fips, nuxeo,...
GHSA-3PXV-7CMR-FJR4 vulnerabilities
Vulnerabilities for packages: kafka, lmcache-cuda-12.8, apache-tika, zipkin, druid, elasticsearch-fips, logstash, spark, kafka-fips, apache-activemq, kafka-bridge, pinot, spark-kubernetes-operator, infinispan, sonarqube, pinot-fips, opensearch-fips, elasticsearch, apache-activemq-fips, nuxeo,...
CVE-2026-34480 vulnerabilities
Vulnerabilities for packages: sonarqube, logstash, apache-pulsar, flink, solr, strimzi-kafka-operator, apache-tika, zipkin, akhq, spark, celeborn, opensearch, infinispan, apache-activemq-artemis, kserve-modelmesh, wavefront-proxy, druid, neo4j, kafka, airflow...
GHSA-3PXV-7CMR-FJR4 vulnerabilities
Vulnerabilities for packages: sonarqube, logstash, apache-pulsar, flink, solr, strimzi-kafka-operator, apache-tika, zipkin, akhq, spark, celeborn, opensearch, infinispan, apache-activemq-artemis, kserve-modelmesh, wavefront-proxy, druid, neo4j, kafka, airflow...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: nats-top, certificate-transparency, lvm-driver, grafana-mimir, newrelic-infrastructure-agent, aws-node-termination-handler, terraform-provider-kubernetes, crossplane-provider-sql, libnvidia-container, nova, flux-image-reflector-controller, gostatsd, act,...
GHSA-W9FJ-CFPG-GRVV vulnerabilities
Vulnerabilities for packages: sonarqube, apache-pulsar, thingsboard, apicurio-registry, strimzi-kafka-operator, zipkin, akhq, keycloak, spark, celeborn, opensearch, infinispan, trino, kserve-modelmesh, wavefront-proxy, druid, wildfly, neo4j, flyway, management-api-for-apache-cassandra-5.0...