RH
Product
Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch
Add Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40453 | 9.9 | Apr 27 | Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection Affected: All versions, or not specified |
| CVE-2026-40858 | 8.8 | Apr 27 | Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository Affected: All versions, or not specified |
| CVE-2026-40022 | 8.2 | Apr 27 | Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime Affected: All versions, or not specified |
| CVE-2025-14813 | 7.5 | Apr 15 | GOSTCTR implementation unable to process more than 255 blocks correctly Affected: All versions, or not specified |
| CVE-2026-33871 | 7.5 | Mar 27 | Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass Affected: All versions, or not specified |
| CVE-2026-33870 | 7.5 | Mar 27 | Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Affected: All versions, or not specified |
| CVE-2026-5795 | 7.4 | Apr 8 | In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable Affected: All versions, or not specified |
| CVE-2026-0636 | 6.5 | Apr 15 | LDAP Injection Vulnerability in LDAPStoreHelper.java Affected: All versions, or not specified |
Showing 8