Package · Maven

org.apache.camel:camel-vertx-http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.1

CVE-2026-42527 Public exploit

Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering ('java.**;javax.**;org.apache.camel.**;!*', or the no-'javax.**'…

Apache Software Foundation Apache Camel org.apache.camel:camel-jms org.apache.camel:camel-sjms Maven

Jul 6, 2026
High 8.1

CVE-2026-40859 Public exploit

Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

Deserialization of Untrusted Data vulnerability in Apache Camel. The camel-vertx-http component deserializes HTTP response bodies carrying the Content-Type application/x-java-serialized-object using a raw java.io.ObjectInputStream, without applying any Object…

Apache Software Foundation Apache Camel org.apache.camel:camel-netty-http org.apache.camel:camel-vertx-http Maven

Jul 6, 2026