CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-azure-sql, crossplane-provider-azure-storage, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-route53, kubevela...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, goreleaser, kube-fluentd-operator, docker-credential-acr-env, karpenter, cloud-provider-azure, crossplane-provider-azure-sql, opa-envoy, argo-rollouts, docker-cli-buildx, nri-kubernetes, net-kourier, crossplane-provider-aws-route53,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-machine, skaffold, splunk-otel-collector, crossplane-provider-azure-sql, nerdctl, falcoctl, docker-cli-buildx, dagger, crossplane-provider-aws-route53, kine, gitlab-pages, opentelemetry-collector, wal-g, pulumi, tekton-chains, slsa-verifier, ksops,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, rancher-machine, cert-manager-istio-csr, rancher-system-upgrade-controller, thanos-operator, extism, git-lfs, crossplane-provider-azure-sql, nerdctl, k8sgateway, cluster-api-gcp-controller, kine, docker-credential-gcr, azcopy, ghaudit,...

Improper Input Validation

Apache Camel AWS SNS component is vulnerable to Improper Input Validation. The vulnerability is due to the absence of an inbound header-filtering rule in Sns2HeaderFilterStrategy, which could theoretically allow externally supplied message attributes to be mapped into Camel control headers;...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821196...

org.apache.camel.kafkaconnector:camel-aws-sns-fifo-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-aws-sns-sink-kafka-connector (>=4.0.0, <=4.14.5) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sns (>=4.0.0, <=4.14.7)

org.apache.camel:camel-aws2-sns MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56140 Source advisory: GHSA-W2V8-8Q6C-3RHR...

CVE-2026-56140

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...

ROOT-APP-MAVEN-CVE-2026-44308 CVE-2026-44308 in io.root.io.awspring.cloud:spring-cloud-aws-sns - Patched by Root

Root has patched CVE-2026-44308 in the io.root.io.awspring.cloud:spring-cloud-aws-sns package for Root:Maven. Multiple fixed versions available...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: MEND:CVE-2026-44308...

com.limemojito.oss.spring-boot:aws-utilities (>=11.0.0, <=12.0.7), com.limemojito.oss.standards:aws-utilities (>=13.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=3.0.0, <=3.4.2)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =3.0.0, =11.0.0, =13.0.0, =3.2.0-m1, =3.0.0, =0.16.0, =1.1.0, =0.0.1, =2.1.0, =2.0.0-beta-17, =7.0.0-beta Source cves: CVE-2026-44308 Source advisory: OSV:GHSA-R4W4-WV68-QV85...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: OSV:GHSA-R4W4-WV68-QV85...

com.limemojito.oss.spring-boot:aws-utilities (>=11.0.0, <=12.0.7), com.limemojito.oss.standards:aws-utilities (>=13.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=3.0.0, <=3.4.2)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =3.0.0, =11.0.0, =13.0.0, =3.2.0-m1, =3.0.0, =0.16.0, =1.1.0, =0.0.1, =2.1.0, =2.0.0-beta-17, =7.0.0-beta Source cves: CVE-2026-44308 Source advisory: GHSA-R4W4-WV68-QV85...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0-m1, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0-m1, =0.4.0, =0.4.0, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: SNYK:JAVA-IOAWSPRINGCLOUD-16799818...

be.appify.prefab:prefab-sns-sqs (>=0.4.0, <=0.7.1), be.appify.prefab:prefab-test (>=0.4.0, <=0.7.1) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=4.0.0, <=4.0.1)

io.awspring.cloud:spring-cloud-aws-sns MAVEN version =4.0.0, =0.4.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =2.1.0, =1.3.0, =7.0.0-beta2, =7.0.0-beta2, =7.3.1 Source cves: CVE-2026-44308 Source advisory: GHSA-R4W4-WV68-QV85...