com.codbex.atlas:codbex-atlas-application (>=2.85.0, <=2.109.0), com.codbex.iapetus:codbex-iapetus-application (>=2.64.0, <=2.73.0) +47 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.15.0, <=4.18.2)

org.apache.camel:camel-sql MAVEN version =4.15.0, =2.85.0, =2.64.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.3 and more Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890720...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=2.112.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +24 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sql MAVEN version =4.19.0, =2.110.0, =2.74.0, =2.76.0 - io.kaoto.forage:forage-jdbc 1.5.0 - io.kaoto.forage:forage-jdbc-common 1.5.0 - io.kaoto.forage:forage-jdbc-db2 1.5.0 - io.kaoto.forage:forage-jdbc-h2 1.5.0 - io.kaoto.forage:forage-jdbc-hsqldb 1.5.0 -...

com.codbex.atlas:codbex-atlas-application (>=2.79.0, <=2.83.1), org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.14.0, <=4.14.5) +27 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-sql MAVEN version =4.14.0, =2.79.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=2.112.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +24 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sql MAVEN version =4.19.0, =2.110.0, =2.74.0, =2.76.0 - io.kaoto.forage:forage-jdbc 1.5.0 - io.kaoto.forage:forage-jdbc-common 1.5.0 - io.kaoto.forage:forage-jdbc-db2 1.5.0 - io.kaoto.forage:forage-jdbc-h2 1.5.0 - io.kaoto.forage:forage-jdbc-hsqldb 1.5.0 -...

com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.109.0), com.codbex.iapetus:codbex-iapetus-application (>=2.68.0, <=2.73.0) +47 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-sql MAVEN version =4.18.0, =2.98.0, =2.68.0, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.3 and more Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=2.112.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +24 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sql MAVEN version =4.19.0, =2.110.0, =2.74.0, =2.76.0 - io.kaoto.forage:forage-jdbc 1.5.0 - io.kaoto.forage:forage-jdbc-common 1.5.0 - io.kaoto.forage:forage-jdbc-db2 1.5.0 - io.kaoto.forage:forage-jdbc-h2 1.5.0 - io.kaoto.forage:forage-jdbc-hsqldb 1.5.0 -...

com.codbex.atlas:codbex-atlas-application (>=2.98.0, <=2.109.0), com.codbex.iapetus:codbex-iapetus-application (>=2.68.0, <=2.73.0) +47 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-sql MAVEN version =4.18.0, =2.98.0, =2.68.0, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.3 and more Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

CVE-2026-42527

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=2.112.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +24 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-sql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-sql MAVEN version =4.19.0, =2.110.0, =2.74.0, =2.76.0 - io.kaoto.forage:forage-jdbc 1.5.0 - io.kaoto.forage:forage-jdbc-common 1.5.0 - io.kaoto.forage:forage-jdbc-db2 1.5.0 - io.kaoto.forage:forage-jdbc-h2 1.5.0 - io.kaoto.forage:forage-jdbc-hsqldb 1.5.0 -...

Insecure Deserialisation

org.apache.camel:camel-sql is vulnerable to Insecure Deserialisation. The vulnerability is due to insufficient validation of serialized objects, which can be exploited by attackers to execute arbitrary code...

org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=1.0.0, <=3.21.0), org.apache.camel.kafkaconnector:camel-aws-redshift-source-kafka-connector (>=1.0.0, <=3.21.0) +32 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=3.0.0, <=3.21.3)

org.apache.camel:camel-sql MAVEN version =3.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.18.1, =3.18.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =3.21.0...

org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.0.0, <=4.0.3), org.apache.camel.kafkaconnector:camel-aws-redshift-source-kafka-connector (>=4.0.0, <=4.0.3) +17 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.0.0, <=4.0.3)

org.apache.camel:camel-sql MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =3.2.0, =3.4.0 - org.apache.camel.quar...

org.apache.camel.springboot:camel-sql-starter (3.22.0) potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (3.22.0)

org.apache.camel:camel-sql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-sql and may be impacted: - org.apache.camel.springboot:camel-sql-starter 3.22.0 Source cves: CVE-2024-22369 Source advisory:...

org.apache.camel.quarkus:camel-quarkus-integration-test-jta (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sql (>=3.5.0, <=3.7.0) +7 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-sql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =9.1.0, =9.1.0, =9.1.0, =10.0.0 Source cves: CVE-2024-22369 Source advisory: GHSA-36XR-4X2F-CFJ9...

org.apache.camel.springboot:camel-sql-starter (3.22.0) potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (3.22.0)

org.apache.camel:camel-sql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-sql and may be impacted: - org.apache.camel.springboot:camel-sql-starter 3.22.0 Source cves: CVE-2024-22369 Source advisory:...

GHSA-36XR-4X2F-CFJ9 Deserialization of Untrusted Data in Apache Camel SQL

Deserialization of Untrusted Data vulnerability in Apache Camel SQL Component. This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users...

org.apache.camel.quarkus:camel-quarkus-integration-test-jta (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sql (>=3.5.0, <=3.7.0) +7 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-sql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =9.1.0, =9.1.0, =9.1.0, =10.0.0 Source cves: CVE-2024-22369 Source advisory: OSV:GHSA-36XR-4X2F-CFJ9...

org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.0.0, <=4.0.3), org.apache.camel.kafkaconnector:camel-aws-redshift-source-kafka-connector (>=4.0.0, <=4.0.3) +17 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.0.0, <=4.0.3)

org.apache.camel:camel-sql MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =3.2.0, =3.4.0 - org.apache.camel.quar...

org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=1.0.0, <=3.21.0), org.apache.camel.kafkaconnector:camel-aws-redshift-source-kafka-connector (>=1.0.0, <=3.21.0) +32 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=3.0.0, <=3.21.3)

org.apache.camel:camel-sql MAVEN version =3.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.18.1, =3.18.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =3.21.0...

org.apache.camel.springboot:camel-sql-starter (3.22.0) potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (3.22.0)

org.apache.camel:camel-sql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-sql and may be impacted: - org.apache.camel.springboot:camel-sql-starter 3.22.0 Source cves: CVE-2024-22369 Source advisory:...