CVE-2026-78165

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

EUVD-2026-104221

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

CVE-2026-78165

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

CVE-2026-78165: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

Apache Camel deserialization injection vulnerability

Apache Camel versions prior to 2.11.0 through 4.18.5, as well as versions from 4.19.0 through 4.22.1, have security vulnerabilities. These vulnerabilities stem from the Apache Camel Spring Redis component using JdkSerializationRedisSerializer when a serialization option is not configured...

PT-2026-117330

Name of the Vulnerable Software and Affected Versions Apache Camel versions 2.11.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description An issue exists in the Apache Camel Spring Redis component where untrusted data is deserialized. The RedisConfiguration.getSerializer method...