Read the docs
Red Hat Security Advisory

RHSA-2026:3890

Red Hat Build of Apache Camel 4.14.4 for Spring Boot release.

Released 2026-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2025-11507 CVE-2025-12543 · GHSA-j382-5jj3-vw4j

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Priority HIGH 76

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01333 Published 2026-01-07 Partial fix · 1.4.18-21.SP19_redhat_00001.1.ep7.el7, 2.0.41-8.SP9_redhat_00001.1.el7eap +50 CWE-20
TI-2026-22089 CVE-2026-27727 · GHSA-m2cm-222f-qw44

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

Priority HIGH 74

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downl…

CVSS 4.0HIGH 8.9 Network High privileges No interaction EPSS 0.00977 Published 2026-02-25 Partial fix · 0.4.0 CWE-74
TI-2026-00756 CVE-2026-1002 · GHSA-cphf-4846-3xx9

Eclipse Vert.x Web static handler file access denial

Priority HIGH 70

The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00384 Published 2026-01-15 Partial fix · 4.5.24, 5.0.7 CWE-444