Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-azure-storage-datalake

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-60093 Public exploit

    Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

    Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an …