Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-sql

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42527 Public exploit

    Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

    Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering ('java.**;javax.**;org.apache.camel.**;!*', or the no-'javax.**'…

    Apache Software Foundation Apache Camel org.apache.camel:camel-jms org.apache.camel:camel-sjms Maven
  • High 7.8
    CVE-2024-22369 Public exploit

    Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

    Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.…

    Apache Software Foundation Apache Camel org.apache.camel:camel-sql Maven