RH
Product
Red Hat Build of Apache Camel 4.14 for Quarkus 3.27
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch
Add Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40453 | 9.9 | Apr 27 | Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection Affected: All versions, or not specified |
| CVE-2026-39852 | 8.2 | May 5 | Quarkus authorization bypass via semicolon path normalization inconsistency Affected: All versions, or not specified |
| CVE-2026-33871 | 7.5 | Mar 27 | Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass Affected: All versions, or not specified |
| CVE-2026-33870 | 7.5 | Mar 27 | Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Affected: All versions, or not specified |
Showing 4