CVE-2026-25747

LevelDB Deserialization Vulnerability Reproducer This project demonstrates a Java deserialization vulnerability in Apache Camel's LevelDB Aggregation Repository, similar to CVE-2024-23114 which affected the Cassandra Aggregation Repository. Vulnerability Summary Property| Value ---|--- Component|...

Should Your Database Systems Use Hardware-Assisted Memory Safety Extensions in Production?

Database systems are predominantly developed in unsafe languages e.g., C/C++ to meet performance requirements through low-level memory management, yet this reliance renders them prone to systemic memory-safety issues that compromise reliability, consistency, security, and durability. Through an...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: GHSA-4J89-3RVJ-P73M...

MAL-2026-13359 Malicious code in test-dev-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b80ff2bcf35e5c92c1c8a551b943d334f94793d693ce846707986613db8108 src/config.js hardcodes a remote host as the English-word phrase "Four Five P Nine Five P One Eight Six P Two Three Seven" and decodes it at import...

Malicious code in discord-api (PyPI)

Source: kam193 3b55230c05e2303e965a53322d83ead8df66e188c696755b26efefd96192a144 Package suggests being an api for discord. On importing the module, it attempts to find and exfiltrate leveldb databases from Discord apps and Chrome --- Category: MALICIOUS - The campaign has clearly malicious intent...

Apache Camel LevelDB Java DefaultLevelDBSerializer Code Execution

The vulnerability of the Camel-LevelDB DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

org.apache.camel.karaf:camel-leveldb (>=4.14.5, <=4.14.7), org.apache.camel.karaf:camel-leveldb-test (>=4.14.5, <=4.14.7) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.14.0, <=4.14.7)

org.apache.camel:camel-leveldb MAVEN version =4.14.0, =4.14.5, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890717...

org.apache.camel.karaf:camel-leveldb (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-leveldb-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.15.0, <=4.18.2)

org.apache.camel:camel-leveldb MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890717...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.19.0, <=4.20.0)

org.apache.camel:camel-leveldb MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890717...

org.apache.camel.karaf:camel-leveldb (>=4.14.5, <=4.14.7), org.apache.camel.karaf:camel-leveldb-test (>=4.14.5, <=4.14.7) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.14.0, <=4.14.7)

org.apache.camel:camel-leveldb MAVEN version =4.14.0, =4.14.5, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-leveldb (>=4.14.5, <=4.14.7), org.apache.camel.karaf:camel-leveldb-test (>=4.14.5, <=4.14.7) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.14.0, <=4.14.7)

org.apache.camel:camel-leveldb MAVEN version =4.14.0, =4.14.5, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-leveldb (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-leveldb-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.18.0, <=4.18.2)

org.apache.camel:camel-leveldb MAVEN version =4.18.0, =4.18.1, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-leveldb (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-leveldb-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.18.0, <=4.18.2)

org.apache.camel:camel-leveldb MAVEN version =4.18.0, =4.18.1, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.19.0, <=4.20.0)

org.apache.camel:camel-leveldb MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.19.0, <=4.20.0)

org.apache.camel:camel-leveldb MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

CVE-2026-42527

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...

org.apache.camel.karaf:camel-leveldb (>=4.14.5, <=4.14.7), org.apache.camel.karaf:camel-leveldb-test (>=4.14.5, <=4.14.7) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.14.0, <=4.14.7)

org.apache.camel:camel-leveldb MAVEN version =4.14.0, =4.14.5, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

org.apache.camel.karaf:camel-leveldb (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-leveldb-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.18.0, <=4.18.2)

org.apache.camel:camel-leveldb MAVEN version =4.18.0, =4.18.1, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-leveldb (>=4.19.0, <=4.20.0)

org.apache.camel:camel-leveldb MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

Malicious code in exxpress-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378e423b00c08a371fbae1c77360685d2277e502e9875caa53fb20f58a39f396 The package name exxpress-tool is a one-character edit of the widely-used express package. On npm install, the declared scripts.postinstall runs...