CVE-2026-49097

The Apache Camel IRC component is vulnerable to a message-header injection flaw (CVE-2026-49097 ). The IrcProducer class uses the irc.sendTo header to determine the destination of outgoing IRC messages. Because this header constant does not use the required Camel prefix, it bypasses the HttpHeade...