cloud.opencode.base:opencode-base-token (=1.0.0), com.flowlogix.depchain:shiro-jakarta (>=18 <=119) +22 more potentially affected by CVE-2026-44598 via org.apache.shiro:shiro-jakarta-ee (>=2.0.0-alpha-1 <=2.1.0)

org.apache.shiro:shiro-jakarta-ee MAVEN version =2.0.0-alpha-1, =18, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.82.10, =0.82.10, =4.7.0, =3.10.0, =3.10.0, =3.10.0, =4.5.0, =4.20.0 and more Source cves: CVE-2026-44598 Source advisory: SNYK:JAVA-ORGAPACHESHIRO-17115416...

org.apache.camel.kafkaconnector:camel-consul-kafka-connector (>=0.1.0 <=0.11.5), org.apache.camel.karaf:camel-consul (>=4.10.3 <=4.14.5) +7 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=3.0.0 <=4.14.5)

org.apache.camel:camel-consul MAVEN version =3.0.0, =0.1.0, =4.10.3, =4.10.3, =1.0.0, =1.0.0, =1.0.0, =4.10.0, =3.0.0, =4.14.5 - org.wildfly.camel:wildfly-camel-itests-standalone-docker =12.0.0 Source cves: CVE-2026-27172 Source advisory: OSV:GHSA-5RC6-9QFP-8VWG...

org.apache.camel.karaf:camel-as2 (>=4.7.0 <=4.8.9), org.apache.camel.karaf:camel-as2-test (>=4.7.0 <=4.8.9) +6 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71 <=1.78)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =4.7.0, =4.7.0, =3.0.0-M1, =3.0.0-M1, =3.2.0, =3.18.0, =3.18.0, =3.18.0, =4.8.9 Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789690...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.0.0-M1 <=3.10.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.0.0-M1 <=3.10.0) +4 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71 <=1.77)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =3.0.0-M1, =3.0.0-M1, =3.2.0, =3.18.0, =3.18.0, =3.18.0, =4.5.0 Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777841...

(RHSA-2024:3780) Important: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.4.SP2)

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available RHBQ 3.8.4.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products: CVE-2022-34169 xalan:...

com.codbex.atlas:codbex-atlas-application (=2.110.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0 <=2.75.0) +11 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.1.0 <=4.3.0)

org.apache.camel:camel-sql MAVEN version =4.1.0, =2.74.0, =3.5.0, =3.35.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =9.1.0, =9.1.0, =9.1.0, =12.94.0, =13.2.0 Source cves: CVE-2024-22369 Source advisory: OSV:GHSA-36XR-4X2F-CFJ9...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0 <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0 <=3.36.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0 <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.20.0 Source cves: CVE-2024-23114 Source advisory: OSV:GHSA-M43P-55RF-8C2J...

cn.ponfee:commons-core (>=1.1 <=1.4), com.fuseanalytics.gradle.sslcertgen:com.fuseanalytics.gradle.sslcertgen.gradle.plugin (=1.0.0) +9 more potentially affected by CVE-2023-33201 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71 <=1.73)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.2.9, =6.0, =6.0, =6.0, =9.0.14, =13.0.1 Source cves: CVE-2023-33201 Source advisory: OSV:GHSA-HR8G-6V94-X4M9...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.0.0-M1 <=3.0.0-M2), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.0.0-M1 <=3.0.0-M2) +3 more potentially affected by CVE-2023-33201 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71 <=1.72)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =3.0.0-M1, =3.0.0-M1, =3.18.0, =3.18.0, =3.18.0, =4.0.0-M3 Source cves: CVE-2023-33201 Source advisory: OSV:GHSA-HR8G-6V94-X4M9...

org.apache.camel.quarkus:camel-quarkus-hashicorp-vault (=3.0.0-M1), org.apache.camel.quarkus:camel-quarkus-hashicorp-vault-deployment (=3.0.0-M1) +11 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (=3.0.0)

org.springframework.vault:spring-vault-core MAVEN version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apache.camel.quarkus:camel-quarkus-hashicorp-vault =3.0.0-M1 -...

org.apache.camel.quarkus:camel-quarkus-integration-test-ldap (>=2.8.0 <=2.13.2), org.apache.camel.quarkus:camel-quarkus-ldap (>=2.8.0 <=2.13.2) +2 more potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (>=3.15.0 <=3.18.3)

org.apache.camel:camel-ldap MAVEN version =3.15.0, =2.8.0, =2.8.0, =2.8.0, =3.15.0, =3.18.3 Source cves: CVE-2022-45046 Source advisory: OSV:GHSA-W66J-XC7R-M2JV...

org.apache.camel.quarkus:camel-quarkus-coap (>=2.13.1 <=2.15.0), org.apache.camel.quarkus:camel-quarkus-coap-deployment (>=2.13.1 <=2.15.0) +16 more potentially affected by CVE-2022-39368 via org.eclipse.californium:scandium (>=2.7.0 <=2.7.3)

org.eclipse.californium:scandium MAVEN version =2.7.0, =2.13.1, =2.13.1, =2.13.1, =3.18.3, =3.18.3, =2.7.0, =2.7.0, =2.7.0, =1.10.1, =1.10.1, =1.10.1, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.1 and more Source cves: CVE-2022-39368 Source advisory: OSV:GHSA-P72G-CGH9-GHJG...

com.github.xitren.fx:signal-ui-fx (>=1.5.2 <=1.7.10), nl.stijngroenen.tradfri:ikea-tradfri-api (>=1.0.0 <=1.2.0) +26 more potentially affected by CVE-2022-2576 via org.eclipse.californium:californium-core (>=2.0.0 <=2.7.2)

org.eclipse.californium:californium-core MAVEN version =2.0.0, =1.5.2, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.1.0, =3.1.0, =2.0.0, =2.0.0, =2.3.0, =2.7.2 and more Source cves: CVE-2022-2576 Source advisory:...

io.github.xiaomisum:ryze-coap (=6.1.0), org.apache.camel.karaf:camel-coap (>=4.7.0 <=4.18.2) +34 more potentially affected by CVE-2022-2576 via org.eclipse.californium:californium-core (>=3.0.0 <=3.5.0)

org.eclipse.californium:californium-core MAVEN version =3.0.0, =4.7.0, =3.8.0, =3.8.0, =3.8.0, =4.4.0, =4.4.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.12.0, =2.0.0, =2.0.0-M6, =2.0.0-M15 and more Source cves: CVE-2022-2576 Source advisory: OSV:GHSA-QQ3J-44GW-CF6R...

Moderate: Red Hat Security Advisory: Red Hat Integration Camel Quarkus Tech-Preview 2 security update

An update to the Red Hat Integration Camel Quarkus tech preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...