TI-2026-25850 CVE-2026-33454 · GHSA-2vqf-x7g4-7c2g
Deserialization of untrusted data in Apache Camel
Priority MEDIUM 49
The Camel-Mail component is vulnerable to Camel message header injection.
RHSA-2026:19835
Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP2)
Released 2026-05-20 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Build of Apache Camel 4.14 for Quarkus 3.27
Fixes 5 records
TI-2026-29205 CVE-2026-40453 · GHSA-jg2m-9x48-3gvj
Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for…
Priority MEDIUM 47
The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'.
TI-2026-30702 CVE-2026-42403 · GHSA-2hfh-9h53-qc24
Apache Neethi: Circular Policy Reference Infinite Loop
Priority MEDIUM 40
Apache Neethi does not properly detect circular references in policy definitions.
TI-2026-30701 CVE-2026-42402 · GHSA-g36m-9g3m-2vmp
Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS
Priority MEDIUM 40
Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.
TI-2026-30703 CVE-2026-42404 · GHSA-287c-fxr7-3w6c
Apache Neethi: Unrestricted HTTP Redirect Following in Policy References
Priority LOW 38
Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.