Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Camel Karavan

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

    Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting…

  • High 8.8

    Apache Camel Karavan: project file name path traversal when committing a project to Git

    Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working cop…