14 matches found
CVE-2026-49042
CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...
CVE-2026-49042 — Updated!
CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...
io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822330...
io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822330...
io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: OSV:GHSA-HH8R-75R6-QRG9...
io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: GHSA-HH8R-75R6-QRG9https://vuln...
io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: GHSA-HH8R-75R6-QRG9...
Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parameters
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...
io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: OSV:GHSA-HH8R-75R6-QRG9https://...
GHSA-HH8R-75R6-QRG9 Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parameters
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...
io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042...
CVE-2026-49042 Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...
io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)
org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042https://vuln...
CVE-2026-49042 Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...