CVE-2026-85254

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...

ai.wanaku:wanaku-tool-service-http (>=0.1.1, <=0.2.0), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +39 more potentially affected by CVE-2026-85251 via org.apache.camel:camel-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-http MAVEN version =4.15.0, =0.1.1, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =1.3.0, =4.4.0, =4.4.0, =4.5.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.18.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.18.0 -...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +42 more potentially affected by CVE-2026-85251 via org.apache.camel:camel-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =4.1.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.22.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.22.0 -...

CVE-2026-85251 Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

CVE-2026-85251

The Apache Camel HTTP component (versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1) contains a credential disclosure vulnerability when followRedirects=true. The root cause involves two paths where credentials—including OAuth2 Bearer tokens , Basic , and Digest credentials—are re-attached to redirect...

EUVD-2026-104192

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

CVE-2026-85251 Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

CVE-2026-85251 Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

CVE-2026-85251

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-85247 Source advisory: MEND:CVE-2026-85247...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

CVE-2026-84180

The camel-knative component in Apache Camel (versions 4.0.0 before 4.18.5 and 4.19.0 before 4.22.1) is vulnerable to information disclosure via unmuted consumer exceptions. When a consumer-side exchange fails, the Knative HTTP consumer writes the resulting exception—including class names, stack t...

CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

CVE-2026-84180

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

io.camelbee:camelbee-quarkus-core (>=2.0.5, <=3.1.2), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +51 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.15.0, <=4.18.4)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.15.0, =2.0.5, =2.0.5, =0.3.0, =1.0, =1.0, =0.7.1, =0.7.1, =0.7.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 and more Source cves: CVE-2026-84176 Source advisory: MEND:CVE-2026-84176https://vulners.com/me...

io.camelbee:camelbee-quarkus-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-quarkus-security (>=3.2.1, <=4.1.0) +58 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =3.38.0, =3.38.0, =3.38.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-84176 Source advisory: MEND:CVE-20...

CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...