CVE-2026-63621

Apache Camel Knative (camel-knative) is vulnerable to header injection in structured CloudEvent mode. When a CloudEvent arrives as application/cloudevents+json, extension fields are copied directly onto Camel Exchange headers without a HeaderFilterStrategy , unlike the binary mode path. An unauth...

EUVD-2026-64960

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode t...