FreeBSD : Weechat -- Multiple vulnerabilities (0d5b4884-8c2b-11f1-8144-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0d5b4884-8c2b-11f1-8144-8447094a420f advisory. The Weechat project reports: Use-after-free and double free when a remote relay sends an event with an...

Apache Camel IrcProducer Data Compromise

The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality and integrity of th...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...

GHSA-463M-2HR2-Q2J7 Apache Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

Apache Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097 Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...