CVE-2026-63621

The Apache Camel Knative component is vulnerable to an injection flaw (CWE-20, CWE-74) due to improper input validation in structured content mode (application/cloudevents+json). While binary content mode filters headers, structured mode copies all CloudEvent extension fields directly into Camel ...

EUVD-2026-64960

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...