CVE-2026-63621

CVE-2026-63621 — camel-knative 구조화된 CloudEvent 헤더 주입 동일한 Apache Camel 취약점에 대한 실행 가능한 개념 증명PoC 재현기입니다. 런타임별로 하나씩 제공됩니다:...

GO-2026-6225 vulnerabilities

Vulnerabilities for packages: knative-serving, tekton-pipelines, crossplane, crossplane-fips, tekton-pipelines-fips, kubeflow-katib, knative-serving-fips...

CVE-2026-63621

A flaw was found in Apache Camel Knative component. The Knative consumer in camel-knative improperly handles CloudEvent extension fields in structured content mode, copying them directly into message headers without proper filtering. This allows an unauthenticated attacker to inject internal Came...

GHSA-VVWM-3J43-7PFM Apache Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

CVE-2026-63621

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

CVE-2026-63621 Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

CVE-2026-63621

CVE-2026-63621 is a header-injection vulnerability in the camel-knative component of Apache Camel . In structured CloudEvent mode (application/cloudevents+json), extension fields from the JSON body are copied into Exchange headers without applying a HeaderFilterStrategy, unlike the binary-mode pa...

CVE-2026-63621 Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

EUVD-2026-64960

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

Exploit for CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header in...

PT-2026-80927

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: jaeger, keda, terraform-mcp-server, external-secrets-operator, weaviate, spicedb, grafana-mimir, external-dns, knative-serving, zot, dagger, docker-cli-buildx, kubescape, opentelemetry-operator, argo-workflows, net-kourier, kubeflow-pipelines, harbor, buildkitd,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: buildah, kyverno, fscrypt, gitlab-kas, kubernetes-dashboard, podman, telegraf, istio, kaf, rancher, prometheus-operator, k3s, containerd, kubernetes, helm, cert-manager, minio, cilium, external-secrets-operator, loki, cloud-provider-aws, aactl, snyk-cli, flux,...

CLEANSTART-2026-EI00038 Security fixes in knative-net-istio 1.20.4-r0

Package knative-net-istio version 1.20.4-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-BT37614 Security fixes in knative-net-istio 1.21.4-r0

Package knative-net-istio version 1.21.4-r0 fixes 6 vulnerabilities: CVE-2026-24051, CVE-2026-29181, CVE-2026-33186, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-SA31637 Security fixes in knative-net-istio 1.21.4-r2

Package knative-net-istio version 1.21.4-r2 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-GA72012 Security fixes in knative-net-istio 1.19.6-r0

Package knative-net-istio version 1.19.6-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-MF50696 Security fixes in knative-net-istio 1.20.4-r2

Package knative-net-istio version 1.20.4-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-KT94915 Security fixes in knative-net-istio 1.22.1-r0

Package knative-net-istio version 1.22.1-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178...