Priority LOW 39
Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00654 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-502
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00574 · Published 2026-07-06 · Partial fix · 4.14.8, 4.18.3 +1 CWE-209
Priority LOW 31
Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Kafka Component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-07-06 · Partial fix · 4.14.8, 4.18.3 +1 CWE-20
Priority LOW 36
Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel IRC component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 50
Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00732 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 48
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel Solr component.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.006 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 40
Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00625 · Published 2026-07-06 · Partial fix · 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 42
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.0055 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-943
Priority MEDIUM 40
Improper Input Validation vulnerability in Apache Camel NATS component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00659 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 50
Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority MEDIUM 50
Improper Input Validation vulnerability in Apache Camel Cometd Component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-20
Priority LOW 31
Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00552 · Published 2026-07-06 · Partial fix · 4.14.8, 4.18.3 +1 CWE-20
Priority LOW 39
Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00984 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-502
Priority LOW 38
Deserialization of Untrusted Data vulnerability in Apache Camel.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00668 · Published 2026-07-06 · Fixed in 4.14.8, 4.18.3 +1 CWE-502
THREATIST.IORead the docs