Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Camel PQC

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-40048 Public exploit

    Apache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager

    The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. The cast to `java.security.…

    Apache Software Foundation Apache Camel PQC org.apache.camel:camel-pqc Maven