Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-platform-http-main

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-66908 Public exploit

    Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted

    Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authentica…

    Apache Software Foundation Apache Camel org.apache.camel:camel-platform-http-main Maven
  • High 8.2
    CVE-2026-40022 Public exploit

    Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

    When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenti…

    Apache Software Foundation Apache Camel Platform HTTP Main org.apache.camel:camel-platform-http-main Maven