CVE-2026-49098 Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

GHSA-45Q3-82M4-75JR vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-hop-fips, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, s3proxy, s3proxy-fips, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, kafbat-ui-fips,...

CVE-2026-42578 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-hop-fips, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, s3proxy, s3proxy-fips, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, kafbat-ui-fips,...

GHSA-F6HV-JMP6-3VWV vulnerabilities

Vulnerabilities for packages: kafbat-ui, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, management-api-for-apache-cassandra-4.0, apache-nifi-registry, logstash, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, commercial-elasticsearch...

CVE-2026-42587 vulnerabilities

Vulnerabilities for packages: kafbat-ui, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, management-api-for-apache-cassandra-4.0, apache-nifi-registry, logstash, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, commercial-elasticsearch...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, pinot, kafka-fips, ghidra, pinot-fips, apache-activemq-artemis, tritonserver-backend-vllm-cuda-13.0, logstash, druid, apache-activemq-fips, kafka-bridge-fips, apache-jena-fuseki, commercial-elasticsearch, camunda-zeebe, nuxeo, neo4j, elasticsearch,...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, pinot, kafka-fips, ghidra, pinot-fips, apache-activemq-artemis, tritonserver-backend-vllm-cuda-13.0, logstash, druid, apache-activemq-fips, kafka-bridge-fips, apache-jena-fuseki, commercial-elasticsearch, camunda-zeebe, nuxeo, neo4j, elasticsearch,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: kafbat-ui, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, management-api-for-apache-cassandra-4.0, logstash, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, commercial-elasticsearch, keycloak-fips,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: kafbat-ui, kayenta, pinot, flyway-fips, tinkerpop, pinot-fips, apache-activemq-artemis, management-api-for-apache-cassandra-4.0, logstash, management-api-for-apache-cassandra-4.1, druid, wazuh-indexer, kafka-bridge-fips, commercial-elasticsearch, keycloak-fips,...