Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites

Summary The vulnerabilities were found in dependent open source libraries used within IBM Quantum Safe Explorer code base. These issues have been addressed by updating the versions of affected libraries. Vulnerability Details CVEID:CVE-2026-9595 DESCRIPTION: Impact: When a user-configured proxy o...

Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...

GHSA-RCVM-6R79-CF4R Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.14.7 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.0.0, <=4.14.7) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.14.7 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.karaf:camel-atmosphere-websocket (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-55993 Source advisory: OSV:GHSA-RCVM-6R79-CF4R...

org.apache.camel.springboot:camel-atmosphere-websocket-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-55993 via org.apache.camel:camel-atmosphere-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-atmosphere-websocket MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-55993 Source advisory: GHSA-RCVM-6R79-CF4R...

GHSA-HGG5-GP4C-GPCG Apache Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path parameters into the Camel Exchange header...

Apache Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path parameters into the Camel Exchange header...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46726 Source advisory: OSV:GHSA-HGG5-GP4C-GPCG...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46726 Source advisory: OSV:GHSA-HGG5-GP4C-GPCG...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46726 Source advisory: GHSA-HGG5-GP4C-GPCG...

org.apache.camel.karaf:camel-vertx-websocket (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.15.0, <=4.18.2)

org.apache.camel:camel-vertx-websocket MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46726 Source advisory: GHSA-HGG5-GP4C-GPCG...

org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-vertx-websocket (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.19.0, <=4.20.0)

org.apache.camel:camel-vertx-websocket MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46726 Source advisory: GHSA-HGG5-GP4C-GPCG...

org.apache.camel.karaf:camel-vertx-websocket (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46726 via org.apache.camel:camel-vertx-websocket (>=4.0.0, <=4.14.7)

org.apache.camel:camel-vertx-websocket MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46726 Source advisory: OSV:GHSA-HGG5-GP4C-GPCG...

CVE-2026-55993

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...

CVE-2026-46726

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path parameters into the Camel Exchange header...

EUVD-2026-41849

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query parameters into the Camel Exchange header...