Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.4.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

Improper Authentication

Overview org.apache.cxf:cxf-rt-ws-security is a services framework that helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. Affected versions of this package are vulnerable to Improper Authentication due to the STSTokenValidator token-validation cache in...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.soap:cloud-altemistafwk-core-soap-wss (>=3.0.0.release, <=3.1.0.release) +299 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=3.0.0-milestone1, <=3.6.12)

org.apache.cxf:cxf-rt-ws-security MAVEN version =3.0.0-milestone1, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.2.0, =1.4.0, =4.2.0.1, =1.7.2.230613, =1.7.3.230802 and more Source cves: CVE-2026-97468 Source advisory: SNYK:JAVA-ORGAPACHECXF-21245928...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), cv.igrp:igrp-core (>=2.0.0.231123-rc1, <=2.0.0.240307-rc2) +115 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.0.0, =1.0.0, =2.0.0.231123-rc1, =4.0.2, =2.4.0, =1.3, =1.3, =1.3, =1.3, =1.3, =2.0.0.alpha1, =2.7.0.cr1, =3.8.0, =2.0.0.alpha1, =2.2.4, =3.33.14 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), de.governikus.panstar.sdk:panstar-soap-sdk (>=4.1.0, <=4.2.0) +85 more potentially affected by CVE-2026-97791 via org.apache.cxf:cxf-rt-ws-security (>=4.1.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.1.0, =1.0.0, =4.1.0, =2.5.0, =1.3, =1.3, =1.3, =1.3, =1.3, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.18.0, =3.33.14 and more Source cves: CVE-2026-97791 Source advisory: MEND:CVE-2026-97791...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), io.camelbee:camelbee-quarkus-core (3.2.1) +52 more potentially affected by CVE-2026-97791 via org.apache.cxf:cxf-rt-ws-security (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.0.0.beta1 and more Source cves: CVE-2026-97791 Source advisory: MEND:CVE-2026-97791...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +364 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=2.1.10, <=3.6.12)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.1.10, =1.1.7, =1.1.9, =1.2.5, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), cv.igrp:igrp-core (>=2.0.0.231123-rc1, <=2.0.0.240307-rc2) +115 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.0.0, =1.0.0, =2.0.0.231123-rc1, =4.0.2, =2.4.0, =1.3, =1.3, =1.3, =1.3, =1.3, =2.0.0.alpha1, =2.7.0.cr1, =3.8.0, =2.0.0.alpha1, =2.2.4, =3.33.14 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: GHSA-38X2-FP9M-87MX...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: MEND:CVE-2014-0034...