CVE-2026-40453GHSA-jg2m-9x48-3gvj
org.apache.camel:camel-coap: Apache Camel has an incomplete fix for CVE-2025-27636
Apache Software Foundation org.apache.camel:camel-coapmavenLibraries & packages
CVSS
9.9CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)1.89%Chance of exploitation activity in the next 30 days, higher than 79% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 4.14.6org.apache.camel:camel-coap, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-coap, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-coap, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.20.0</version></dependency> - 4.14.6org.apache.camel:camel-google-pubsub, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-google-pubsub, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-google-pubsub, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.20.0</version></dependency>
Show all 33 fixed versions
- 4.14.6org.apache.camel:camel-jms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-jms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-jms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.20.0</version></dependency> - 4.14.6org.apache.camel:camel-sjms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-sjms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-sjms, mavenGitHub
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.20.0</version></dependency> - 4.14.6Apache Camel JMSCVE List
- 4.18.2Apache Camel JMSCVE List
- 4.20.0Apache Camel JMSCVE List
- 4.14.6Apache Camel CoAPCVE List
- 4.18.2Apache Camel CoAPCVE List
- 4.20.0Apache Camel CoAPCVE List
- 4.14.6Apache Camel Google PubSubCVE List
- 4.18.2Apache Camel Google PubSubCVE List
- 4.20.0Apache Camel Google PubSubCVE List
- 4.14.6org.apache.camel:camel-coap, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-coap, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-coap, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-coap</artifactId><version>4.20.0</version></dependency> - 4.14.6org.apache.camel:camel-google-pubsub, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-google-pubsub, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-google-pubsub, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-google-pubsub</artifactId><version>4.20.0</version></dependency> - 4.14.6org.apache.camel:camel-jms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-jms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-jms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-jms</artifactId><version>4.20.0</version></dependency> - 4.14.6org.apache.camel:camel-sjms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.14.6</version></dependency> - 4.18.2org.apache.camel:camel-sjms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.18.2</version></dependency> - 4.20.0org.apache.camel:camel-sjms, MavenOSV
<dependency><groupId>org.apache.camel</groupId><artifactId>camel-sjms</artifactId><version>4.20.0</version></dependency>
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'. The same setLowerCase(true) call was not applied to five non-HTTP HeaderFilterStrategy implementations: JmsHeaderFilterStrategy and ClassicJmsHeaderFilterStrategy in camel-jms, SjmsHeaderFilterStrategy in camel-sjms, CoAPHeaderFilterStrategy in camel-coap, and GooglePubsubHeaderFilterStrategy in camel-google-pubsub. Because those strategies use case-sensitive String.startsWith('Camel'/'camel') filtering while the Camel Exchange stores headers in a case-insensitive map, an attacker with JMS (or equivalent) producer access to the broker consumed by a Camel route can inject case-variant Camel internal headers, which are then resolved by downstream components such as camel-exec and camel-file using their canonical casing. This enables remote code execution and arbitrary file write on routes that forward JMS messages to header-driven components.
This issue affects Apache Camel: from 3.0.0 before 4.14.6, from 4.15.0 before 4.18.2, from 4.19.0 before 4.20.0.
Users are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.6. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.2.
Text from GitHub Advisory Database
Affected versions 257
- org.apache.camel:camel-coap, maven>= 3.0.0, < 4.14.6GitHub
- org.apache.camel:camel-coap, maven>= 4.15.0, < 4.18.2GitHub
- org.apache.camel:camel-coap, maven>= 4.19.0, < 4.20.0GitHub
- org.apache.camel:camel-google-pubsub, maven>= 3.0.0, < 4.14.6GitHub
- org.apache.camel:camel-google-pubsub, maven>= 4.15.0, < 4.18.2GitHub
- org.apache.camel:camel-google-pubsub, maven>= 4.19.0, < 4.20.0GitHub
- org.apache.camel:camel-jms, maven>= 3.0.0, < 4.14.6GitHub
- org.apache.camel:camel-jms, maven>= 4.15.0, < 4.18.2GitHub
- org.apache.camel:camel-jms, maven>= 4.19.0, < 4.20.0GitHub
- org.apache.camel:camel-sjms, maven>= 3.0.0, < 4.14.6GitHub
- org.apache.camel:camel-sjms, maven>= 4.15.0, < 4.18.2GitHub
- org.apache.camel:camel-sjms, maven>= 4.19.0, < 4.20.0GitHub
- Apache Camel JMSaffected: 3.0.0 before 4.14.6CVE List
- Apache Camel JMSaffected: 4.15.0 before 4.18.2CVE List
- Apache Camel JMSaffected: 4.19.0 before 4.20.0CVE List
- Apache Camel CoAPaffected: 3.0.0 before 4.14.6CVE List
- Apache Camel CoAPaffected: 4.15.0 before 4.18.2CVE List
- Apache Camel CoAPaffected: 4.19.0 before 4.20.0CVE List
- Apache Camel Google PubSubaffected: 3.0.0 before 4.14.6CVE List
- Apache Camel Google PubSubaffected: 4.15.0 before 4.18.2CVE List
- Apache Camel Google PubSubaffected: 4.19.0 before 4.20.0CVE List
- org.apache.camel:camel-coap, Mavenfrom 3.0.0, fixed in 4.14.6OSV
- org.apache.camel:camel-coap, Maven3.0.0OSV
- org.apache.camel:camel-coap, Maven3.0.1OSV
- org.apache.camel:camel-coap, Maven3.1.0OSV
- org.apache.camel:camel-coap, Maven3.10.0OSV
- org.apache.camel:camel-coap, Maven3.11.0OSV
- org.apache.camel:camel-coap, Maven3.11.1OSV
- org.apache.camel:camel-coap, Maven3.11.2OSV
- org.apache.camel:camel-coap, Maven3.11.3OSV
- org.apache.camel:camel-coap, Maven3.11.4OSV
- org.apache.camel:camel-coap, Maven3.11.5OSV
- org.apache.camel:camel-coap, Maven3.11.6OSV
- org.apache.camel:camel-coap, Maven3.11.7OSV
- org.apache.camel:camel-coap, Maven3.12.0OSV
- org.apache.camel:camel-coap, Maven3.13.0OSV
- org.apache.camel:camel-coap, Maven3.14.0OSV
- org.apache.camel:camel-coap, Maven3.14.1OSV
- org.apache.camel:camel-coap, Maven3.14.10OSV
- org.apache.camel:camel-coap, Maven3.14.2OSV
- org.apache.camel:camel-coap, Maven3.14.3OSV
- org.apache.camel:camel-coap, Maven3.14.4OSV
- org.apache.camel:camel-coap, Maven3.14.5OSV
- org.apache.camel:camel-coap, Maven3.14.6OSV
- org.apache.camel:camel-coap, Maven3.14.7OSV
- org.apache.camel:camel-coap, Maven3.14.8OSV
- org.apache.camel:camel-coap, Maven3.14.9OSV
- org.apache.camel:camel-coap, Maven3.15.0OSV
- org.apache.camel:camel-coap, Maven3.16.0OSV
- org.apache.camel:camel-coap, Maven3.17.0OSV
- org.apache.camel:camel-coap, Maven3.18.0OSV
- org.apache.camel:camel-coap, Maven3.18.1OSV
- org.apache.camel:camel-coap, Maven3.18.2OSV
- org.apache.camel:camel-coap, Maven3.18.3OSV
- org.apache.camel:camel-coap, Maven3.18.4OSV
- org.apache.camel:camel-coap, Maven3.18.5OSV
- org.apache.camel:camel-coap, Maven3.18.6OSV
- org.apache.camel:camel-coap, Maven3.18.7OSV
- org.apache.camel:camel-coap, Maven3.18.8OSV
- org.apache.camel:camel-coap, Maven3.19.0OSV
- org.apache.camel:camel-coap, Maven3.2.0OSV
- org.apache.camel:camel-coap, Maven3.20.0OSV
- org.apache.camel:camel-coap, Maven3.20.1OSV
- org.apache.camel:camel-coap, Maven3.20.2OSV
- org.apache.camel:camel-coap, Maven3.20.3OSV
- org.apache.camel:camel-coap, Maven3.20.4OSV
- org.apache.camel:camel-coap, Maven3.20.5OSV
- org.apache.camel:camel-coap, Maven3.20.6OSV
- org.apache.camel:camel-coap, Maven3.20.7OSV
- org.apache.camel:camel-coap, Maven3.20.8OSV
- org.apache.camel:camel-coap, Maven3.20.9OSV
- org.apache.camel:camel-coap, Maven3.21.0OSV
- org.apache.camel:camel-coap, Mavenfrom 4.15.0, fixed in 4.18.2OSV
- org.apache.camel:camel-coap, Maven4.15.0OSV
- org.apache.camel:camel-coap, Maven4.16.0OSV
- org.apache.camel:camel-coap, Maven4.17.0OSV
- org.apache.camel:camel-coap, Maven4.18.0OSV
- org.apache.camel:camel-coap, Maven4.18.1OSV
- org.apache.camel:camel-coap, Mavenfrom 4.19.0, fixed in 4.20.0OSV
- org.apache.camel:camel-coap, Maven4.19.0OSV
- org.apache.camel:camel-google-pubsub, Mavenfrom 3.0.0, fixed in 4.14.6OSV
- org.apache.camel:camel-google-pubsub, Maven3.0.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.0.1OSV
- org.apache.camel:camel-google-pubsub, Maven3.1.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.10.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.1OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.2OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.3OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.4OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.5OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.6OSV
- org.apache.camel:camel-google-pubsub, Maven3.11.7OSV
- org.apache.camel:camel-google-pubsub, Maven3.12.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.13.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.1OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.10OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.2OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.3OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.4OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.5OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.6OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.7OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.8OSV
- org.apache.camel:camel-google-pubsub, Maven3.14.9OSV
- org.apache.camel:camel-google-pubsub, Maven3.15.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.16.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.17.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.1OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.2OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.3OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.4OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.5OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.6OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.7OSV
- org.apache.camel:camel-google-pubsub, Maven3.18.8OSV
- org.apache.camel:camel-google-pubsub, Maven3.19.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.2.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.0OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.1OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.2OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.3OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.4OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.5OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.6OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.7OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.8OSV
- org.apache.camel:camel-google-pubsub, Maven3.20.9OSV
- org.apache.camel:camel-google-pubsub, Maven3.21.0OSV
- org.apache.camel:camel-google-pubsub, Mavenfrom 4.15.0, fixed in 4.18.2OSV
- org.apache.camel:camel-google-pubsub, Maven4.15.0OSV
- org.apache.camel:camel-google-pubsub, Maven4.16.0OSV
- org.apache.camel:camel-google-pubsub, Maven4.17.0OSV
- org.apache.camel:camel-google-pubsub, Maven4.18.0OSV
- org.apache.camel:camel-google-pubsub, Maven4.18.1OSV
- org.apache.camel:camel-google-pubsub, Mavenfrom 4.19.0, fixed in 4.20.0OSV
- org.apache.camel:camel-google-pubsub, Maven4.19.0OSV
- org.apache.camel:camel-jms, Mavenfrom 3.0.0, fixed in 4.14.6OSV
- org.apache.camel:camel-jms, Maven3.0.0OSV
- org.apache.camel:camel-jms, Maven3.0.1OSV
- org.apache.camel:camel-jms, Maven3.1.0OSV
- org.apache.camel:camel-jms, Maven3.10.0OSV
- org.apache.camel:camel-jms, Maven3.11.0OSV
- org.apache.camel:camel-jms, Maven3.11.1OSV
- org.apache.camel:camel-jms, Maven3.11.2OSV
- org.apache.camel:camel-jms, Maven3.11.3OSV
- org.apache.camel:camel-jms, Maven3.11.4OSV
- org.apache.camel:camel-jms, Maven3.11.5OSV
- org.apache.camel:camel-jms, Maven3.11.6OSV
- org.apache.camel:camel-jms, Maven3.11.7OSV
- org.apache.camel:camel-jms, Maven3.12.0OSV
- org.apache.camel:camel-jms, Maven3.13.0OSV
- org.apache.camel:camel-jms, Maven3.14.0OSV
- org.apache.camel:camel-jms, Maven3.14.1OSV
- org.apache.camel:camel-jms, Maven3.14.10OSV
- org.apache.camel:camel-jms, Maven3.14.2OSV
- org.apache.camel:camel-jms, Maven3.14.3OSV
- org.apache.camel:camel-jms, Maven3.14.4OSV
- org.apache.camel:camel-jms, Maven3.14.5OSV
- org.apache.camel:camel-jms, Maven3.14.6OSV
- org.apache.camel:camel-jms, Maven3.14.7OSV
- org.apache.camel:camel-jms, Maven3.14.8OSV
- org.apache.camel:camel-jms, Maven3.14.9OSV
- org.apache.camel:camel-jms, Maven3.15.0OSV
- org.apache.camel:camel-jms, Maven3.16.0OSV
- org.apache.camel:camel-jms, Maven3.17.0OSV
- org.apache.camel:camel-jms, Maven3.18.0OSV
- org.apache.camel:camel-jms, Maven3.18.1OSV
- org.apache.camel:camel-jms, Maven3.18.2OSV
- org.apache.camel:camel-jms, Maven3.18.3OSV
- org.apache.camel:camel-jms, Maven3.18.4OSV
- org.apache.camel:camel-jms, Maven3.18.5OSV
- org.apache.camel:camel-jms, Maven3.18.6OSV
- org.apache.camel:camel-jms, Maven3.18.7OSV
- org.apache.camel:camel-jms, Maven3.18.8OSV
- org.apache.camel:camel-jms, Maven3.19.0OSV
- org.apache.camel:camel-jms, Maven3.2.0OSV
- org.apache.camel:camel-jms, Maven3.20.0OSV
- org.apache.camel:camel-jms, Maven3.20.1OSV
- org.apache.camel:camel-jms, Maven3.20.2OSV
- org.apache.camel:camel-jms, Maven3.20.3OSV
- org.apache.camel:camel-jms, Maven3.20.4OSV
- org.apache.camel:camel-jms, Maven3.20.5OSV
- org.apache.camel:camel-jms, Maven3.20.6OSV
- org.apache.camel:camel-jms, Maven3.20.7OSV
- org.apache.camel:camel-jms, Maven3.20.8OSV
- org.apache.camel:camel-jms, Maven3.20.9OSV
- org.apache.camel:camel-jms, Maven3.21.0OSV
- org.apache.camel:camel-jms, Mavenfrom 4.15.0, fixed in 4.18.2OSV
- org.apache.camel:camel-jms, Maven4.15.0OSV
- org.apache.camel:camel-jms, Maven4.16.0OSV
- org.apache.camel:camel-jms, Maven4.17.0OSV
- org.apache.camel:camel-jms, Maven4.18.0OSV
- org.apache.camel:camel-jms, Maven4.18.1OSV
- org.apache.camel:camel-jms, Mavenfrom 4.19.0, fixed in 4.20.0OSV
- org.apache.camel:camel-jms, Maven4.19.0OSV
- org.apache.camel:camel-sjms, Mavenfrom 3.0.0, fixed in 4.14.6OSV
- org.apache.camel:camel-sjms, Maven3.0.0OSV
- org.apache.camel:camel-sjms, Maven3.0.1OSV
- org.apache.camel:camel-sjms, Maven3.1.0OSV
- org.apache.camel:camel-sjms, Maven3.10.0OSV
- org.apache.camel:camel-sjms, Maven3.11.0OSV
- org.apache.camel:camel-sjms, Maven3.11.1OSV
- org.apache.camel:camel-sjms, Maven3.11.2OSV
- org.apache.camel:camel-sjms, Maven3.11.3OSV
- org.apache.camel:camel-sjms, Maven3.11.4OSV
- org.apache.camel:camel-sjms, Maven3.11.5OSV
- org.apache.camel:camel-sjms, Maven3.11.6OSV
- org.apache.camel:camel-sjms, Maven3.11.7OSV
- org.apache.camel:camel-sjms, Maven3.12.0OSV
- org.apache.camel:camel-sjms, Maven3.13.0OSV
- org.apache.camel:camel-sjms, Maven3.14.0OSV
- org.apache.camel:camel-sjms, Maven3.14.1OSV
- org.apache.camel:camel-sjms, Maven3.14.10OSV
- org.apache.camel:camel-sjms, Maven3.14.2OSV
- org.apache.camel:camel-sjms, Maven3.14.3OSV
- org.apache.camel:camel-sjms, Maven3.14.4OSV
- org.apache.camel:camel-sjms, Maven3.14.5OSV
- org.apache.camel:camel-sjms, Maven3.14.6OSV
- org.apache.camel:camel-sjms, Maven3.14.7OSV
- org.apache.camel:camel-sjms, Maven3.14.8OSV
- org.apache.camel:camel-sjms, Maven3.14.9OSV
- org.apache.camel:camel-sjms, Maven3.15.0OSV
- org.apache.camel:camel-sjms, Maven3.16.0OSV
- org.apache.camel:camel-sjms, Maven3.17.0OSV
- org.apache.camel:camel-sjms, Maven3.18.0OSV
- org.apache.camel:camel-sjms, Maven3.18.1OSV
- org.apache.camel:camel-sjms, Maven3.18.2OSV
- org.apache.camel:camel-sjms, Maven3.18.3OSV
- org.apache.camel:camel-sjms, Maven3.18.4OSV
- org.apache.camel:camel-sjms, Maven3.18.5OSV
- org.apache.camel:camel-sjms, Maven3.18.6OSV
- org.apache.camel:camel-sjms, Maven3.18.7OSV
- org.apache.camel:camel-sjms, Maven3.18.8OSV
- org.apache.camel:camel-sjms, Maven3.19.0OSV
- org.apache.camel:camel-sjms, Maven3.2.0OSV
- org.apache.camel:camel-sjms, Maven3.20.0OSV
- org.apache.camel:camel-sjms, Maven3.20.1OSV
- org.apache.camel:camel-sjms, Maven3.20.2OSV
- org.apache.camel:camel-sjms, Maven3.20.3OSV
- org.apache.camel:camel-sjms, Maven3.20.4OSV
- org.apache.camel:camel-sjms, Maven3.20.5OSV
- org.apache.camel:camel-sjms, Maven3.20.6OSV
- org.apache.camel:camel-sjms, Maven3.20.7OSV
- org.apache.camel:camel-sjms, Maven3.20.8OSV
- org.apache.camel:camel-sjms, Maven3.20.9OSV
- org.apache.camel:camel-sjms, Maven3.21.0OSV
- org.apache.camel:camel-sjms, Mavenfrom 4.15.0, fixed in 4.18.2OSV
- org.apache.camel:camel-sjms, Maven4.15.0OSV
- org.apache.camel:camel-sjms, Maven4.16.0OSV
- org.apache.camel:camel-sjms, Maven4.17.0OSV
- org.apache.camel:camel-sjms, Maven4.18.0OSV
- org.apache.camel:camel-sjms, Maven4.18.1OSV
- org.apache.camel:camel-sjms, Mavenfrom 4.19.0, fixed in 4.20.0OSV
- org.apache.camel:camel-sjms, Maven4.19.0OSV
References 15
- github.com/apache/camel/commit/1e331daa4eea0a3f01d951e74cda8faee79495a2Fixvia GitHub
- github.com/apache/camel/commit/301bb7401cd480895b94a28a8ad6cf04952d8125Fixvia GitHub
- github.com/apache/camel/commit/3d2efeed2f6ea757f0254a1d1cdeb9a4f28ca147Fixvia GitHub
- camel.apache.org/security/CVE-2026-40453.htmlAdvisoryvia CVE List
- access.redhat.com/errata/RHSA-2026:17668Advisoryvia CVE List
- access.redhat.com/errata/RHSA-2026:19835Advisoryvia CVE List
- access.redhat.com/security/cve/CVE-2026-40453Advisoryvia CVE List
- github.com/advisories/GHSA-jg2m-9x48-3gvjAdvisoryvia GitHub
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40453.jsonAdvisoryvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2026-40453Referencevia GitHub
- github.com/apache/camel/pull/22569Referencevia GitHub
- github.com/apache/camel/pull/22575Referencevia GitHub
- github.com/apache/camel/pull/22576Referencevia GitHub
- issues.apache.org/jira/browse/CAMEL-23313Referencevia GitHub
- bugzilla.redhat.com/show_bug.cgi?id=2463173Referencevia CVE List