Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Camel Quarkus

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-88789 Public exploit

    Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

    Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document …