58 matches found
org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)
org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...
org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)
org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...
CVE-2026-80354
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...
CVE-2026-80352
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...
CVE-2026-80351
Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...
CVE-2026-80354 Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...
CVE-2026-80354 Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...
EUVD-2026-75292
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...
CVE-2026-80354 Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...
CVE-2026-80354
An authorization vulnerability in Apache Camel K (versions 2.0.0 to 2.9.3 and 2.10.1 to 2.10.2 ) allows a tenant to bypass security controls via custom resource resolution. An attacker can reference secrets by name within the operator namespace , potentially exposing sensitive secrets belonging t...
EUVD-2026-75291
Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...
CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod
Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...
CVE-2026-80351
Apache Camel K is vulnerable to an eval injection vulnerability caused by improper neutralization of directives in dynamically evaluated Maven configuration. This flaw allows tenant-controlled repository content to influence code execution within the operator pod , potentially enabling tenants to...
CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod
Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...
CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod
Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...
CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...
EUVD-2026-75290
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...
CVE-2026-80352
Apache Camel K is vulnerable to a YAML injection in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges of the operator . The vulnerabil...
CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...
PT-2026-89301
Name of the Vulnerable Software and Affected Versions Apache Camel K versions 2.0.0 through 2.9.2 Apache Camel K versions 2.10.1 through 2.10.1 Description An eval injection occurs due to improper neutralization of directives in dynamically evaluated Maven configuration. This allows content from...