Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-atmosphere-websocket

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-55993 Public exploit

    Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

    Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query p…