org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.20.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.20.0) +2 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-undertow (>=4.19.0, <=4.20.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874452...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites

Summary The vulnerabilities were found in dependent open source libraries used within IBM Quantum Safe Explorer code base. These issues have been addressed by updating the versions of affected libraries. Vulnerability Details CVEID:CVE-2026-9595 DESCRIPTION: Impact: When a user-configured proxy o...

org.apache.camel.springboot:camel-spring-ai-tools-starter (>=4.17.0, <=4.18.2) potentially affected by CVE-2026-49042 via org.apache.camel:camel-spring-ai-tools (>=4.17.0, <=4.18.2)

org.apache.camel:camel-spring-ai-tools MAVEN version =4.17.0, =4.17.0, =4.18.2 Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042...

org.apache.camel.springboot:camel-spring-ai-tools-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-49042 via org.apache.camel:camel-spring-ai-tools (>=4.19.0, <=4.20.0)

org.apache.camel:camel-spring-ai-tools MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.20.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.20.0) +2 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-undertow (>=4.19.0, <=4.20.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56139 Source advisory: OSV:GHSA-HJG2-F45W-C566...

com.milesight.beaveriot:application-dev (1.0.0), com.milesight.beaveriot:rule-engine-component (1.0.0) +5 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-undertow (>=4.0.0, <=4.14.7)

org.apache.camel:camel-undertow MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56139 Source advisory: GHSA-HJG2-F45W-C566...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: GHSA-MRRP-9GJM-749V...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-cxf (>=4.0.0, <=4.14.5) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-rest MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =4.7.0, =4.7.0, =4.10.7, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: GHSA-MRRP-9GJM-749V...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: OSV:GHSA-MRRP-9GJM-749V...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46455 Source advisory: GHSA-MQWC-6QWC-V9GQ...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-infinispan-cluster-service (>=3.35.0, <=3.36.0) +8 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-infinispan (>=4.19.0, <=4.20.0)

org.apache.camel:camel-infinispan MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-cxf (>=4.0.0, <=4.14.5) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-rest MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =4.7.0, =4.7.0, =4.10.7, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46455 Source advisory: MEND:CVE-2026-46455...

K000162085: Spring Data MongoDB vulnerability CVE-2026-41717

Security Advisory Description Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions...

K000162084: Spring Web Services vulnerability CVE-2026-41000

Security Advisory Description Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and creation timestamps, Timestamp elements, and certain SAML one-time-u...

Spring Office Hours Podcast: S5E17 - Spring Boot 4.1 with Phil Webb

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Spring Boot co-creator and project lead Phil Webb to dig into what's new in Spring Boot 4.1. They walk through the headline features landing in this release, including...

Linux Distros Unpatched Vulnerability : CVE-2026-41001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is...