org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0-m1, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0-m1, =4.7.0, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the mapping of externally-supplied message user-headers into the Exchange without applying a header filtering process. An attacker can manipulate internal control headers by injecting specially craft...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.31.0, <=3.33.1) +3 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.17.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.17.0, =4.18.1, =3.31.0, =3.31.0, =3.31.0, =4.17.0, =4.18.2 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.17.0, <=4.18.2) potentially affected by CVE-2026-55994 via org.apache.camel:camel-atmosphere-websocket (>=4.17.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.17.0, =4.18.1, =4.17.0, =4.18.2 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821199...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55994 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821199...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites

Summary The vulnerabilities were found in dependent open source libraries used within IBM Quantum Safe Explorer code base. These issues have been addressed by updating the versions of affected libraries. Vulnerability Details CVEID:CVE-2026-9595 DESCRIPTION: Impact: When a user-configured proxy o...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.14.7 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...

GHSA-RCVM-6R79-CF4R Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.14.7 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46726 Source advisory: GHSA-HGG5-GP4C-GPCG...