Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-cassandraql

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2026-42527 Public exploit

    Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

    Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering ('java.**;javax.**;org.apache.camel.**;!*', or the no-'javax.**'…

    Apache Software Foundation Apache Camel org.apache.camel:camel-jms org.apache.camel:camel-sjms Maven
  • Critical 9.8
    CVE-2024-23114

    Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

    Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Came…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cassandraql Maven