Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-15668 |
|
Buffer Overflow in c (CVE-2025-15668)
vulnerability in c (CVE-2025-15668). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4249 |
|
Vulnerability in dos (CVE-2026-4249)
vulnerability in dos (CVE-2026-4249). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49297 |
|
Path Traversal in apache (CVE-2026-49297)
path traversal in apache (CVE-2026-49297). Data can be tampered with by attackers. Exploitable via ``GCSToSFTPOperator``.
|
| CVE-2026-46588 |
|
Vulnerability in org.apache.camel:camel-couchdb (CVE-2026-46588)
vulnerability in org.apache.camel:camel-couchdb (CVE-2026-46588). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46587 |
|
Vulnerability in org.apache.camel:camel-couchbase (CVE-2026-46587)
vulnerability in org.apache.camel:camel-couchbase (CVE-2026-46587). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49042 |
|
Vulnerability in org.apache.camel:camel-langchain4j-tools (CVE-2026-49042)
vulnerability in org.apache.camel:camel-langchain4j-tools (CVE-2026-49042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2025-8591 |
|
Cross-Site Scripting (XSS) in wso2 (CVE-2025-8591)
cross-site scripting in wso2 (CVE-2025-8591). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56810 |
|
Vulnerability in dos (CVE-2026-56810)
vulnerability in dos (CVE-2026-56810). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9165 |
|
Vulnerability in dos (CVE-2026-9165)
vulnerability in dos (CVE-2026-9165). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56139 |
|
Vulnerability in org.apache.camel:camel-undertow (CVE-2026-56139)
vulnerability in org.apache.camel:camel-undertow (CVE-2026-56139). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49365 |
|
Vulnerability in org.apache.camel:camel-netty-http (CVE-2026-49365)
vulnerability in org.apache.camel:camel-netty-http (CVE-2026-49365). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-53913 |
|
Authentication Bypass in org.apache.camel:camel-keycloak (CVE-2026-53913)
authentication bypass in org.apache.camel:camel-keycloak (CVE-2026-53913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49099 |
|
Vulnerability in org.apache.camel:camel-salesforce (CVE-2026-49099)
vulnerability in org.apache.camel:camel-salesforce (CVE-2026-49099). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-56140 |
|
Vulnerability in org.apache.camel:camel-aws2-sns (CVE-2026-56140)
vulnerability in org.apache.camel:camel-aws2-sns (CVE-2026-56140). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-55994 |
|
Vulnerability in org.apache.camel:camel-iggy (CVE-2026-55994)
vulnerability in org.apache.camel:camel-iggy (CVE-2026-55994). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-55993 |
|
Vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-55993)
vulnerability in org.apache.camel:camel-atmosphere-websocket (CVE-2026-55993). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-48206 |
|
Vulnerability in org.apache.camel:camel-jira (CVE-2026-48206)
vulnerability in org.apache.camel:camel-jira (CVE-2026-48206). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-48205 |
|
Vulnerability in org.apache.camel:camel-dns (CVE-2026-48205)
vulnerability in org.apache.camel:camel-dns (CVE-2026-48205). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49098 |
|
Vulnerability in org.apache.camel:camel-kafka (CVE-2026-49098)
vulnerability in org.apache.camel:camel-kafka (CVE-2026-49098). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49086 |
|
Vulnerability in org.apache.camel:camel-dapr (CVE-2026-49086)
vulnerability in org.apache.camel:camel-dapr (CVE-2026-49086). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-49097 |
|
Vulnerability in org.apache.camel:camel-irc (CVE-2026-49097)
vulnerability in org.apache.camel:camel-irc (CVE-2026-49097). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46584 |
|
Vulnerability in org.apache.camel:camel-mail (CVE-2026-46584)
vulnerability in org.apache.camel:camel-mail (CVE-2026-46584). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-48203 |
|
Vulnerability in org.apache.camel:camel-solr (CVE-2026-48203)
vulnerability in org.apache.camel:camel-solr (CVE-2026-48203). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46456 |
|
Vulnerability in org.apache.camel:camel-aws2-sqs (CVE-2026-46456)
vulnerability in org.apache.camel:camel-aws2-sqs (CVE-2026-46456). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46585 |
|
Vulnerability in org.apache.camel:camel-lucene (CVE-2026-46585)
vulnerability in org.apache.camel:camel-lucene (CVE-2026-46585). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46726 |
|
Vulnerability in org.apache.camel:camel-vertx-websocket (CVE-2026-46726)
vulnerability in org.apache.camel:camel-vertx-websocket (CVE-2026-46726). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46592 |
|
Vulnerability in org.apache.camel:camel-cxf-soap (CVE-2026-46592)
vulnerability in org.apache.camel:camel-cxf-soap (CVE-2026-46592). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-48204 |
|
Vulnerability in org.apache.camel:camel-mongodb-gridfs (CVE-2026-48204)
vulnerability in org.apache.camel:camel-mongodb-gridfs (CVE-2026-48204). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46590 |
|
Unsafe Deserialization in org.apache.camel:camel-pqc (CVE-2026-46590)
vulnerability in org.apache.camel:camel-pqc (CVE-2026-46590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-24012 |
|
Vulnerability in apache (CVE-2026-24012)
vulnerability in apache (CVE-2026-24012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42527 |
|
Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-42527)
vulnerability in org.apache.camel:camel-jms (CVE-2026-42527). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-43865 |
|
Unsafe Deserialization in org.apache.camel:camel-hazelcast (CVE-2026-43865)
vulnerability in org.apache.camel:camel-hazelcast (CVE-2026-43865). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-40859 |
|
Unsafe Deserialization in org.apache.camel:camel-vertx-http (CVE-2026-40859)
vulnerability in org.apache.camel:camel-vertx-http (CVE-2026-40859). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-43867 |
|
Unsafe Deserialization in org.apache.camel:camel-pqc (CVE-2026-43867)
vulnerability in org.apache.camel:camel-pqc (CVE-2026-43867). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-43866 |
|
Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-43866)
vulnerability in org.apache.camel:camel-jms (CVE-2026-43866). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-24014 |
|
Vulnerability in apache (CVE-2026-24014)
vulnerability in apache (CVE-2026-24014). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14809 |
|
SQL Injection in sqli (CVE-2026-14809)
SQL injection in sqli (CVE-2026-14809). Confidential information can be exposed externally.
|
| CVE-2026-46457 |
|
Vulnerability in org.apache.camel:camel-nats (CVE-2026-46457)
vulnerability in org.apache.camel:camel-nats (CVE-2026-46457). Data can be tampered with by attackers. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46454 |
|
Vulnerability in org.apache.camel:camel-cometd (CVE-2026-46454)
vulnerability in org.apache.camel:camel-cometd (CVE-2026-46454). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-46453 |
|
Vulnerability in org.apache.camel:camel-elasticsearch-rest-client (CVE-2026-46453)
vulnerability in org.apache.camel:camel-elasticsearch-rest-client (CVE-2026-46453). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-40047 |
|
Vulnerability in org.apache.camel:camel-docling (CVE-2026-40047)
vulnerability in org.apache.camel:camel-docling (CVE-2026-40047). Confidential information can be exposed externally. Exploitable via ``docling``. Mitigation: upgrade to `4.18.3` or later.
|
| CVE-2026-24013 |
|
Vulnerability in apache (CVE-2026-24013)
vulnerability in apache (CVE-2026-24013). Confidential information can be exposed externally.
|
| CVE-2026-1433 |
|
Vulnerability in CVE-2026-1433 (CVE-2026-1433)
vulnerability in CVE-2026-1433 (CVE-2026-1433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14808 |
|
Vulnerability in CVE-2026-14808 (CVE-2026-14808)
vulnerability in CVE-2026-14808 (CVE-2026-14808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14807 |
|
Vulnerability in CVE-2026-14807 (CVE-2026-14807)
vulnerability in CVE-2026-14807 (CVE-2026-14807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14801 |
|
Vulnerability in c (CVE-2026-14801)
vulnerability in c (CVE-2026-14801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14800 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-14800 (CVE-2026-14800)
vulnerability in CVE-2026-14800 (CVE-2026-14800). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14802 |
|
A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the...
A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the...
|
| CVE-2026-14795 |
|
Vulnerability in sqli (CVE-2026-14795)
vulnerability in sqli (CVE-2026-14795). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14798 |
|
Vulnerability in sqli (CVE-2026-14798)
vulnerability in sqli (CVE-2026-14798). Risk of unauthorized operations or information disclosure.
|