org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429356...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +8 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-api (>=4.19.0, <=4.22.0)

org.apache.camel:camel-knative-api MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430452...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +7 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative (>=4.19.0, <=4.22.0)

org.apache.camel:camel-knative MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430451...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430453...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the KnativeHttpConsumer in the camel-knative HTTP consumer. An external sender can trigger a consumer-side route failure by sending a request that causes exchange processing to fail, then read the exception clas...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

org.apache.camel.karaf:camel-knative (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.2) +8 more potentially affected by CVE-2026-63621 via org.apache.camel:camel-knative (>=4.15.0, <=4.18.3)

org.apache.camel:camel-knative MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.3 Source cves: CVE-2026-63621 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-19320058...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.38.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.38.0) +7 more potentially affected by CVE-2026-63621 via org.apache.camel:camel-knative (>=4.19.0, <=4.21.0)

org.apache.camel:camel-knative MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.21.0 Source cves: CVE-2026-63621 Source advisory: MEND:CVE-2026-63621...

Apache Camel Code Execution

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

org.apache.camel.karaf:camel-knative-http (4.18.1), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.0) +6 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.1)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.0 Source cves: CVE-2026-47323 Source advisory: MEND:CVE-2026-47323...

CVE-2026-47323: Improper Handling of Case Sensitivity

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...