73 matches found
Improper Validation of Unsafe Equivalence in Input
Overview Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the CXF-RS or CXF-SOAP endpoints due to missing inbound filtering via setInFilterStartsWith. An attacker can execute arbitrary code and write files by injecting Camel-internal header...
CVE-2026-47323
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...
CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...
CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...
CVE-2026-47323
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...
EUVD-2026-30895
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...
Apache Camel 安全漏洞
Apache Camel is an open-source integration framework based on the Enterprise Integration Pattern EIP, developed by the Apache Foundation in the United States. This framework provides implementations of Java objects following the EIP pattern and allows routing and mediation rules to be configured...
PT-2026-41898
Name of the Vulnerable Software and Affected Versions Camel-CXF affected versions not specified Camel-Knative affected versions not specified Description Message header injection is possible in Camel-CXF and Camel-Knative due to missing inbound filtering in the CxfRsHeaderFilterStrategy and Knati...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: emissary, cluster-api-ipam-provider-in-cluster, minc-fips, crossplane-provider-aws-vpc-fips, jobset-fips, kube-logging-operator, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, crossplane-provider-azure-signalrservice, apache-exporter,...
GHSA-CM33-6792-R9FM vulnerabilities
Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, apache-nifi, druid, keycloak, spark-kubernetes-operator-fips, tez, commercial-elasticsearch, management-api-for-apache-cassandra-5.0, opensearch, strimzi-kafka-operator, strimzi-kafka-operator-fips, flyway, thingsboard, wildfly,...
CVE-2026-42579 vulnerabilities
Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, apache-nifi, druid, keycloak, spark-kubernetes-operator-fips, tez, commercial-elasticsearch, management-api-for-apache-cassandra-5.0, opensearch, strimzi-kafka-operator, strimzi-kafka-operator-fips, flyway, thingsboard, wildfly,...
CVE-2026-35554 vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-vitess, druid, opensearch, strimzi-kafka-operator-fips, strimzi-kafka-operator, thingsboard, wildfly, opensearch-fips, knative-kafka-broker, debezium, seata, debezium-connector-informix, logstash, knative-kafka-broker-fips,...
GHSA-5QCV-4RPC-JP93 vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-vitess, druid, opensearch, strimzi-kafka-operator-fips, strimzi-kafka-operator, thingsboard, wildfly, opensearch-fips, knative-kafka-broker, debezium, seata, debezium-connector-informix, logstash, knative-kafka-broker-fips,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, nginx-prometheus-exporter, prometheus-pushgateway, grafana-pyroscope, yunikorn-k8shim, dkron, flux-helm-controller, docker-cli, migrate, snyk-cli, step-issuer, gatekeeper, gh, kaf, tofu-controller, terraform, ingress-nginx-controller,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, nginx-prometheus-exporter, prometheus-pushgateway, grafana-pyroscope, yunikorn-k8shim, dkron, flux-helm-controller, docker-cli, migrate, snyk-cli, step-issuer, gatekeeper, gh, kaf, tofu-controller, terraform, ingress-nginx-controller,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: emissary, pgwatch, jobset-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, apache-exporter, cluster-api-provider-vsphere, yunikorn-k8shim, json-exporter-fips, prometheus-stackdriver-exporter, docker-compose-fips, omni-fips, boring-registry,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: emissary, pgwatch, jobset-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, apache-exporter, cluster-api-provider-vsphere, yunikorn-k8shim, json-exporter-fips, prometheus-stackdriver-exporter, docker-compose-fips, omni-fips, boring-registry,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: age-fips, cluster-api-ipam-provider-in-cluster, jobset-fips, crossplane-provider-aws-cognitoidp-fips, cluster-api-provider-vsphere, json-exporter-fips, docker-compose-fips, kubernetes-csi-external-resizer-fips, kube-logging-operator-custom-runner, gitlab-workhorse-ce...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: emissary, cluster-api-ipam-provider-in-cluster, minc-fips, pgwatch, jobset-fips, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, apache-exporter, nri-mongodb, cluster-api-provider-vsphere, yunikorn-k8shim,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: emissary, cluster-api-ipam-provider-in-cluster, minc-fips, pgwatch, jobset-fips, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, apache-exporter, nri-mongodb, cluster-api-provider-vsphere, yunikorn-k8shim,...