org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429356...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +42 more potentially affected by CVE-2026-85251 via org.apache.camel:camel-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =4.1.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.22.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.22.0 -...

Insertion of Sensitive Information Into Sent Data

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the OAuth2ClientConfigurer and basic/digest...

ai.wanaku:wanaku-routing-http-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3) +58 more potentially affected by CVE-2026-85251 via org.apache.camel:camel-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-http MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =4.0.1, =4.0.1, =4.0.1, =3.2.0, =3.2.0, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =3.1.2 - io.dscope.camel:ag-ui-yaml-service 1.0.0 and more Source cves: CVE-2026-85251 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-214293...

io.camelbee:camelbee-standalone-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-standalone-starter (>=3.2.1, <=4.1.0) +20 more potentially affected by CVE-2026-85254 via org.apache.camel:camel-platform-http-main (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http-main MAVEN version =4.19.0, =3.2.1, =3.2.1, =1.5.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0, =4.22.0 and more Source cves: CVE-2026-85254 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429367...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.4.1) +18 more potentially affected by CVE-2026-85254 via org.apache.camel:camel-platform-http-main (>=4.0.0, <=4.18.4)

org.apache.camel:camel-platform-http-main MAVEN version =4.0.0, =0.3.0, =1.0, =1.0, =4.7.0, =4.11.0, =4.0.0, =4.0.0, =4.18.0, =4.12.0, =4.7.0, =4.4.0, =4.8.0, =4.17.0, =4.14.0, =4.18.0, =4.18.4 and more Source cves: CVE-2026-85254 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429367...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the enhanceHeaderFilterStrategyToSkipHttpRequestHeaders function in the Platform HTTP component. An attacker can cause caller-supplied values in common request headers that the filter is meant t...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +42 more potentially affected by CVE-2026-85317 via org.apache.camel:camel-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =4.1.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.22.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.22.0 -...

Use of Cache Containing Sensitive Information

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via the OAuth2 token cache in the camel-http component. The...

ai.wanaku:wanaku-routing-http-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3) +58 more potentially affected by CVE-2026-85317 via org.apache.camel:camel-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-http MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =4.0.1, =4.0.1, =4.0.1, =3.2.0, =3.2.0, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =3.1.2 - io.dscope.camel:ag-ui-yaml-service 1.0.0 and more Source cves: CVE-2026-85317 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-214293...

Insufficient Granularity of Access Control

Overview Affected versions of this package are vulnerable to Insufficient Granularity of Access Control via the isHttpProxy function in the Platform HTTP component. When a deployment exposes a route whose configured path begins with proxy such as proxyStats, the endpoint acts as a catch-all...

ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-tool-service-yaml-route (>=0.0.4, <=0.0.7) +81 more potentially affected by CVE-2026-85316 via org.apache.camel:camel-platform-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-platform-http MAVEN version =4.0.0, =0.0.1, =0.0.4, =1.1.0, =1.1.0, =2.0.1, =4.0.0, =2.0.1, =0.3.0, =1.0, =1.0, =0.7.1, =0.7.1, =0.7.1, =3.2.0, =3.15.3 and more Source cves: CVE-2026-85316 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429411...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=14.56.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +73 more potentially affected by CVE-2026-85316 via org.apache.camel:camel-platform-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http MAVEN version =4.19.0, =2.110.0, =2.74.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =3.38.0, =3.38.0, =3.38.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-85316 Source advisory:...

USN-8936-1 php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities

It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...

USN-8936-1: PHP vulnerabilities

It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...

Security update for libsoup2

This update for libsoup2 fixes the following issues: CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

SUSE-SU-2026:4739-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding

A vulnerability was discovered in Tornado where it improperly handles HTTP requests containing duplicate Transfer-Encoding: chunked headers. When duplicate Transfer-Encoding headers are present in an incoming request, Tornado ignores them and treats the request as body-less, leaving the chunked...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429513...