org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cassandraql MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890718...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890718...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-cassandraql MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890718...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-cassandraql MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-cassandraql MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-cassandraql MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-cassandraql MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.18.0, <=4.18.2)

org.apache.camel:camel-cassandraql MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

CVE-2026-42527

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cassandraql MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.14.0, <=4.14.5) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-cassandraql (>=4.14.0, <=4.14.7)

org.apache.camel:camel-cassandraql MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

Important: Red Hat Security Advisory: Red Hat Integration Camel K 1.10.8 release and security update.

Red Hat Integration Camel K 1.10.8 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

A deserialization of untrusted data flaw was found in the Apache Camel CassandraQL Component AggregationRepository. The affected versions of Apache Camel are vulnerable to unsafe deserialization, where, under specific conditions, it is possible to deserialize a malicious payload...

Apache Camel CassandraQL Code Execution

The vulnerability of the CassandraQL component of the Java framework Apache Camel is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Insecure Deserialization

org.apache.camel:camel-cassandraql is vulnerable to Insecure Deserialization. The vulnerability is due to insufficient validation of serialized objects, which can be exploited by attackers to execute arbitrary code...

org.apache.camel.springboot:camel-cassandraql-starter (3.22.0) potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (3.22.0)

org.apache.camel:camel-cassandraql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-cassandraql and may be impacted: - org.apache.camel.springboot:camel-cassandraql-starter 3.22.0 Source cves: CVE-2024-23114...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0, <=3.7.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.3.0 Source cves: CVE-2024-23114 Source advisory: GHSA-M43P-55RF-8C2J...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0, <=3.7.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.3.0 Source cves: CVE-2024-23114 Source advisory: OSV:GHSA-M43P-55RF-8C2J...