CVE-2026-85250

CVE-2026-85250 — camel-xpath: XML external entity processing documentType=InputSource Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, with documentType set to InputSource, XPathBuilder handed the payload straight to javax.xml.xpath, which builds a DocumentBuilder of...