CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

CVE-2026-66906

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906 Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

EUVD-2026-64956

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906

CVE-2026-66906 is a relative path traversal (CWE-22) in the camel-azure-storage-blob component of Apache Camel, rated CVSS 9.1 (Critical) . The downloadBlobToFile operation joins the fileDir endpoint option with the remote blob name verbatim—without lexical normalization or a containment check—so...

PT-2026-80918

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7107: Backport to 4.18.z CLONE - ODF Console is breaking DFBUGS-7064: RHODF 4.18.24 release DFBUGS-7046:...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.30 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.16.30 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.16.30 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7345: RHODF 4.16.30 release DFBUGS-7105: Backport to 4.16.z CLONE - ODF Console is breaking DFBUGS-6743:...

python311-azure-storage-blob-12.24.1-1.1 on GA media (moderate)

python311-azure-storage-blob-12.24.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14690-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2024:12283-1 python310-azure-storage-blob-12.13.1-2.1 on GA media

These are all security issues fixed in the python310-azure-storage-blob-12.13.1-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2023:2897-1 Security update for python-azure-core, python-azure-storage-blob

This update for python-azure-core, python-azure-storage-blob fixes the following issues: Security fixes: - CVE-2022-30187: Fixed information disclosure vulnerability bsc1202088. Recommended fixes: - New upstream release version 1.23.1 to SLE 15 bsc1199282, jscPM-3243, jscSLE-24629...

MAL-2022-1378 Malicious code in azure-storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82d9678e620a731040f4e69c1e04932c1484859155e94875d9e5d5a96fff1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1377 Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5294 Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5293 Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3607a0554a0463b3991dbaa481801aa5e3519da54506a5967664c934d0d6836 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-112 Malicious code in @azure-tests/perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0724245e727790fb75c31579601a9d00160e01fd720d1dae58dab67537157970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...