RH
Product
Red Hat build of Apache Camel 4 for Quarkus 3
56
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 38Medium 11Low 0
Watch
Add Red Hat build of Apache Camel 4 for Quarkus 3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47691 | 10.0 | Jun 12 | Netty has Insufficient Bailiwick Validation for NS Records Affected: All versions, or not specified |
| CVE-2026-45674 | 10.0 | Jun 12 | Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records Affected: All versions, or not specified |
| CVE-2026-40453 | 9.9 | Apr 27 | Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection Affected: All versions, or not specified |
| CVE-2026-49875 | 9.8 | Jun 12 | Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils Affected: All versions, or not specified |
| CVE-2026-40860 | 9.8 | Apr 27 | Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp Affected: All versions, or not specified |
| CVE-2026-33454 | 9.4 | Apr 27 | Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant) Affected: All versions, or not specified |
| CVE-2026-2332 | 9.1 | Apr 14 | HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Affected: All versions, or not specified |
Showing 7