Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-neo4j

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-46591 Public exploit

    Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component. The camel-neo4j producer builds the Cypher WHERE clause for its match/retrieve and delete operations from the CamelNeo4jMatchProperties map. CVE-202…

    Apache Software Foundation Apache Camel org.apache.camel:camel-neo4j Maven
  • Medium 5.3
    CVE-2025-66169

    Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component

    Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3…

    Apache Software Foundation Apache Camel Neo4j org.apache.camel:camel-neo4j Maven