CVE-2026-90885

CVE-2026-90885 — camel-saxon: XQuery over an already-built Source was parsed with Saxon's defaults XXE Runnable proof-of-concept reproducer for the Apache Camel vulnerability where XQueryBuilder in camel-saxon — which evaluates expressions for both the xquery language and the xquery component —...