Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-hazelcast

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2026-43865 Public exploit

    Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

    Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelca…

    Apache Software Foundation Apache Camel org.apache.camel:camel-hazelcast Maven