Apache Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: OSV:GHSA-463M-2HR2-Q2J7...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)

org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)

org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097 Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097 Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097

The Apache Camel IRC component contains an Improper Input Validation vulnerability (CWE-20/CWE-74) within the IrcProducer class. The component uses plain, non-Camel-prefixed header constants (e.g., irc.sendTo) which bypass the HttpHeaderFilterStrategy at the HTTP boundary. This allows an unauthen...

org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)

org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: MEND:CVE-2026-49097...

EUVD-2026-41843

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097 Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

CVE-2026-49097: Improper Input Validation

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...

SUSE CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

UBUNTU-CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...