OESA-2026-2838 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: No limit was present on the number of pipelined requests that could be queued. Impact An attacker may be able to use pipelined requests to use excessive amounts of memory, potentially leading to DoS.CVE-2026-54273 If an attacker sends...

OESA-2026-2839 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: No limit was present on the number of pipelined requests that could be queued. Impact An attacker may be able to use pipelined requests to use excessive amounts of memory, potentially leading to DoS.CVE-2026-54273 If an attacker sends...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.0.0-m1, <=3.27.4) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the VertxWebsocketConsumer inbound header mapping in components/camel-vertx/camel-vertx-websocket. An attacker can redirect server-side HTTP requests and disclose sensitive values by sending WebSocke...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46726 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17881055...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the mapping of externally-supplied message user-headers into the Exchange without applying a header filtering process. An attacker can manipulate internal control headers by injecting specially craft...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the mapping of externally-supplied message user-headers into the Exchange without applying a header filtering process. An attacker can manipulate internal control headers by injecting specially craft...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.31.0, <=3.33.1) +3 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.17.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.17.0, =4.18.1, =3.31.0, =3.31.0, =3.31.0, =4.17.0, =4.18.2 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the WebsocketConsumer.service process. An attacker can redirect server-side HTTP requests to arbitrary destinations and access sensitive environment variables, application properties, or vault secret...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-55994 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821200...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.0.0-m1, <=3.27.4) +3 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-55993 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821203...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55994 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55994 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821199...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0-m1, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0-m1, =4.7.0, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821201...