org.apache.camel.kafkaconnector:camel-sjms2-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-sjms2 (4.18.0) +6 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-sjms2 (>=4.15.0, <=4.18.1)

org.apache.camel:camel-sjms2 MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...

org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-amqp (>=4.15.0, <=4.18.1)

org.apache.camel:camel-amqp MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...

org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-amqp (>=4.15.0, <=4.18.1)

org.apache.camel:camel-amqp MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: MEND:CVE-2026-40860...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (3.18.2), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (3.18.2) +4 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.2)

org.apache.camel:camel-infinispan MAVEN version 3.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector 3.18.2 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.13.3), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.13.3) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.6)

org.apache.camel:camel-infinispan MAVEN version 3.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.13.3 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.5.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.5.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.13.0)

org.apache.camel:camel-infinispan MAVEN version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.5.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.7.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.7.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.14.1)

org.apache.camel:camel-infinispan MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.7.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.13.1, <=2.13.2), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.13.1, <=2.13.2) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.3)

org.apache.camel:camel-infinispan MAVEN version 3.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.13.1, =2.13.1, =2.13.1, =2.13.2 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.0.0, <=2.1.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.0.0, <=2.1.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.0)

org.apache.camel:camel-infinispan MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.0.0, =2.0.0, =2.0.0, =2.1.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=1.0.0-m1, <=1.0.0-m2), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=1.0.0-m1, <=1.0.0-m2) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.0.0)

org.apache.camel:camel-infinispan MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m2 ...

org.apache.camel.quarkus:camel-quarkus-infinispan (1.0.0-cr3), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (1.0.0-cr3) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.4.0)

org.apache.camel:camel-infinispan MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 1.0.0-cr3 -...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (>=4.0.0, <=4.18.0), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (>=4.0.0, <=4.18.0) +11 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (>=4.0.0-m1, <=4.19.0)

org.apache.camel:camel-infinispan MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.32.0, =3.32.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.32.0, =4.6.0, =4.0.0-m1, =4.19.0 Source cves: CVE-2026-6857 Source advisory: OSV:G...

org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (3.31.0), org.apache.camel.quarkus:camel-quarkus-keycloak (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-23552 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.17.0)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-23552 Source advisory: GHSA-C3F3-CC42-XR9V...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.8.9), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.8.9) +6 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71, <=1.78)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =4.7.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.2.0, =3.18.0, =3.18.0, =3.18.0, =4.8.9 Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789690...

org.apache.camel.quarkus:camel-quarkus-integration-test-jta (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sql (>=3.5.0, <=3.7.0) +7 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-sql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =9.1.0, =9.1.0, =9.1.0, =10.0.0 Source cves: CVE-2024-22369 Source advisory: MEND:CVE-2024-22369...