CVE-2026-55993

Reprodutor de Injeção de Cabeçalho do camel-atmosphere-websocket CVE-2026-55993 Este projeto demonstra uma injeção de cabeçalho de mensagem no componente camel-atmosphere-websocket do Apache Camel, rastreada como CVE-2026-55993. O consumidor WebSocket copia os parâmetros de consulta da conexão pa...

CVE-2026-49097

Riproduttore dell'iniezione nell'header irc.sendTo di camel-irc CVE-2026-49097 Questo progetto dimostra un'iniezione nell'header del messaggio nel componente camel-irc di Apache Camel, identificata come CVE-2026-49097. IrcProducer legge l'header irc.sendTo per scegliere la destinazione del...

CVE-2026-49086

Riproduttore dell'Override delle Routing Header del Consumer camel-dapr / Confused Deputy CVE-2026-49086 Questo progetto dimostra un difetto di override delle routing header confused deputy nel componente camel-dapr di Apache Camel, tracciato come CVE-2026-49086. Il consumer pub/sub di Dapr...

CVE-2026-49098

CVE-2026-49098 — camel-kafka: iniezione di intestazione kafka.OVERRIDETOPIC Riproduttori proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2...

CVE-2026-49099

CVE-2026-49099 — Injeção de Cabeçalho sObjectQuery no camel-salesforce Reprodutores executáveis de prova de conceito para a mesma vulnerabilidade do Apache Camel, um por runtime: Runtime| Diretório| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot...

CVE-2026-48206

CVE-2026-48206 — Iniezione dell'header IssueKey in camel-jira Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

apache__camel_CVE-2018-8041_2-20-3

Apache Camel Apache Camel ist ein Open-Source-Integrationsframework, das Sie in die Lage versetzt, schnell und einfach verschiedene Systeme zu integrieren, die Daten konsumieren oder produzieren. Einführung Camel ermöglicht es Ihnen, Routing- und Vermittlungsregeln in einer Vielzahl von...

GHSA-C9FF-59G8-M36Q vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-84218 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2025-27636-Apache-Camel-PoC

PoC per Apache Camel CVE-2025–27636 e CVE-2025-29891 CVE-2025–27636 e CVE-2025-29891 sono vulnerabilità in Apache Camel che interessano le versioni: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Lo sfruttamento di queste vulnerabilità può consentire agli attaccanti di eseguire metodi interni di Came...

CVE-2026-103412

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2026-103413

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-49365

CVE-2026-49365 — Divulgazione dello stack-trace di muteException in camel-netty-http / camel-undertow Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack| Componenti mostrati ---|---|---|--- Camel Spring Boot|...

EUVD-2026-95757

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413

Apache Camel Karavan versions 4.0.0 through 4.22.0 are vulnerable to an improper input validation flaw during deployment. The software unmarshals a project's kubernetes.yaml and applies all contained resources to the cluster without restricting resource kinds, rejecting security-sensitive pod opt...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103412 Apache Camel Karavan: project file name path traversal when committing a project to Git

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2026-103412 Apache Camel Karavan: project file name path traversal when committing a project to Git

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

EUVD-2026-95756

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...