Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +42 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =4.1.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.22.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.22.0 -...

ai.wanaku:wanaku-routing-http-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3) +58 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-http MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =4.0.1, =4.0.1, =4.0.1, =3.2.0, =3.2.0, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =3.1.2 - io.dscope.camel:ag-ui-yaml-service 1.0.0 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-214295...

io.github.luigidemasi:camel-jbang-plugin-kit (0.4.0), io.kaoto.forage:camel-jbang-plugin-forage (>=1.5.0, <=1.6.0) +21 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-vertx-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-vertx-http MAVEN version =4.19.0, =1.5.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429515https://vulners.com/snyk/SNYK...

ai.wanaku:wanaku-routing-http-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3) +152 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-http-common (>=4.0.0, <=4.18.4)

org.apache.camel:camel-http-common MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =4.0.1, =4.0.1, =4.0.1, =1.1.0, =1.1.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.6.2 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429516...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +104 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-http-common (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http-common MAVEN version =4.19.0, =2.110.0, =2.74.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =1.5.0, =1.5.0, =1.6.0 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429516...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.4.1) +22 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-vertx-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-vertx-http MAVEN version =4.0.0, =0.3.0, =1.0, =1.0, =4.0.0, =4.7.0, =3.2.0, =3.33.0, =3.33.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.0.0, =4.18.0, =4.18.4 and more Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429515https...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-78164 Source advisory:...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers i...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-http-common is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers ...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430141...

Improper Handling of Case Sensitivity

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the extractTarget function in the HttpServerChannelHandler...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory:...

Permissive Cross-domain Policy with Untrusted Domains

Overview Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the createCorsHandler method in the Platform HTTP Vertx component. When CORS is enabled and camel.server.cors.origins is unset, an attacker can make a page on any origin send...

io.camelbee:camelbee-quarkus-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-quarkus-security (>=3.2.1, <=4.1.0) +58 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =3.38.0, =3.38.0, =3.38.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-84176 Source advisory: SNYK:JAVA-O...

ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-tool-service-yaml-route (>=0.0.4, <=0.0.7) +65 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.0.0, <=4.18.4)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.0.0, =0.0.1, =0.0.4, =2.0.1, =4.0.0, =2.0.1, =0.3.0, =1.0, =1.0, =0.7.1, =0.7.1, =0.7.1, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.14.0 and more Source cves: CVE-2026-84176 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429957...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +8 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-api (>=4.19.0, <=4.22.0)

org.apache.camel:camel-knative-api MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-84180 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430452...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...