GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, knative-kafka-broker, knative-serving-fips, gitlab-kas, nemo, argo-workflows-fips, aactl, commercial-grafana, grafana, kubernetes, k3s, kyverno-fips, keda-fips, frankenphp-8.3, flux, vault, commercial-kyverno, frankenphp-8.5, rancher-agent, etcd, zitade...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: terragrunt-fips, cert-manager, knative-kafka-broker, knative-serving-fips, gitlab-kas, nemo, argo-workflows-fips, aactl, wal-g, commercial-grafana, rootlesskit-fips, grafana, kubernetes, zarf-fips, k3s, kyverno-fips, docker-fips, keda-fips, amazon-ssm-agent, witness,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: terragrunt-fips, cert-manager, knative-kafka-broker, knative-serving-fips, gitlab-kas, nemo, argo-workflows-fips, aactl, caddy-fips, commercial-grafana, zarf-fips, grafana, kubernetes, k3s, kyverno-fips, keda-fips, amazon-ssm-agent, witness, nfpm, frankenphp-8.3,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cert-manager, knative-kafka-broker, knative-serving-fips, gitlab-kas, nemo, argo-workflows-fips, aactl, commercial-grafana, grafana, kubernetes, k3s, kyverno-fips, keda-fips, frankenphp-8.3, flux, vault, commercial-kyverno, frankenphp-8.5, rancher-agent, etcd, zitade...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, cert-manager, gitea, spire-server, opentelemetry-collector, nerdctl, snyk-cli, prometheus, external-secrets-operator, flux-source-controller, rancher-agent, external-dns, trivy, falco-no-driver, kubernetes, kyverno, k9s, cilium-cli, cloud-provider-aws,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, cert-manager, gitea, spire-server, opentelemetry-collector, nerdctl, snyk-cli, prometheus, external-secrets-operator, flux-source-controller, rancher-agent, external-dns, trivy, falco-no-driver, kubernetes, kyverno, k9s, cilium-cli, cloud-provider-aws,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: gitea, spire-server, pulumi, snyk-cli, flux-source-controller, trivy, falco-no-driver, kubernetes, opentofu, cilium-cli, go-discover, kubescape, rancher, witness, minio, guac, argo-cd, mattermost, kubernetes-dashboard, istio, telegraf, kaf, grype, pulumi-language-jav...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: skaffold, cert-manager, gitea, spire-server, gptscript, nerdctl, opentelemetry-collector, pulumi, prometheus, external-secrets-operator, flux-source-controller, podman, snyk-cli, external-dns, trivy, falco-no-driver, melange, apko, kubernetes, opentofu,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, spire-server, opentelemetry-collector, nerdctl, snyk-cli, prometheus, external-secrets-operator, podman, rancher-agent, external-dns, falco-no-driver, kubernetes, kyverno, cilium-cli, cloud-provider-aws, k3s, rancher, buildah, cilium, minio, gitlab-kas,...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: celeborn, knative-kafka-broker, keycloak-fips, hadoop-fips, hono, thingsboard, pinot, pinot-fips, apache-hop-fips, apache-pulsar, apache-pulsar-fips, zipkin, apicurio-registry, seata, tez, neo4j, management-api-for-apache-cassandra-5.0, apache-activemq-artemis,...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: celeborn, knative-kafka-broker, keycloak-fips, hadoop-fips, hono, thingsboard, pinot, pinot-fips, apache-hop-fips, apache-pulsar, apache-pulsar-fips, zipkin, apicurio-registry, seata, tez, neo4j, management-api-for-apache-cassandra-5.0, apache-activemq-artemis,...

Improper Validation of Unsafe Equivalence in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the CXF-RS or CXF-SOAP endpoints due to missing inbound filtering via setInFilterStartsWith. An attacker can execute arbitrary code and write files by injecting Camel-internal header...

GHSA-8364-HFQJ-PWM6 Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-47323

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

EUVD-2026-30895

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-47323

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...