Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-atmosphere-websocket

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2026-71300 Public exploit

    Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection

    Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which conn…

    Apache Software Foundation Apache Camel org.apache.camel:camel-atmosphere-websocket Maven
  • High 7.5
    CVE-2026-55993 Public exploit

    Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

    Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query p…

    Apache Software Foundation Apache Camel Atmosphere Websocket org.apache.camel:camel-atmosphere-websocket Maven