56 matches found
CVE-2026-46456
CVE-2026-46456 — camel-aws2-sqs Iniezione di header tramite attributi di messaggio in entrata Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime:...
CVE-2026-46456
A flaw was found in Apache Camel AWS2-SQS Component. This vulnerability allows a remote attacker, with permissions to send messages to a consumed SQS queue, to inject arbitrary Camel control headers into the message exchange. This is due to a missing inbound header filter strategy. The injected...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, cloud-provider-aws, policy-controller, steampipe, traefik, crossplane-provider-aws-memorydb, ko, flux, crossplane-provider-aws-route53, cluster-api-azure-controller, trivy-operator, buildah, glab,...
Improper Input Validation
Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to improper inbound filtering of SQS message attributes, which allows an attacker who can send messages to the SQS queue to inject arbitrary Camel control headers, potentially influencing downstream producers such a...
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' due to the lack of an inbound filter rule in Sns2HeaderFilterStrategy. An attacker cannot manipulate internal headers o...
CVE-2026-46456
Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...
CVE-2026-46456 Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers
Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...
CVE-2026-46456 Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers
Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...
EUVD-2023-2477
Malicious code in bioql PyPI...
EUVD-2023-2581
Malicious code in bioql PyPI...
EUVD-2023-1900
Malicious code in bioql PyPI...
EUVD-2023-32555
Malicious code in bioql PyPI...
CVE-2023-41943
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue...
MAL-2024-9710 Malicious code in middleware-sdk-sqs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregistеrs.Sqs.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4068 Malicious code in Be.Vlaanderen.Basisregistеrs.Sqs.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisrеgistеrs.Sqs.Lаmbdа (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4086 Malicious code in Be.Vlaanderen.Basisrеgistеrs.Sqs.Lаmbdа (NuGet)
--- -= Per source details. Do not edit below this line.=-...