AC
Product
Apache Camel Lucene
by Apache Software Foundation · last CVE Jul 6, 2026
1
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Apache Camel Lucene to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46585
7.5
1%
Jul 6
Apache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query
Affected: 4.0.0 before 4.14.8; 4.15.0 before 4.18.3; 4.19.0 before 4.21.0
Showing 1