Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-66169 EUVD-2026-2447GHSA-4jrw-64vr-7g8m

Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component

Published Jan 14, 2026 · Updated Jan 15, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Camel Neo4j Package: org.apache.camel:camel-neo4j Ecosystem: Maven

Description

Cypher Injection vulnerability in Apache Camel camel-neo4j component.

This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0

Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Camel Neo4j 4.10.0 – < 4.10.8, 4.14.0 – < 4.14.3, 4.15.0 – < 4.17.0 4.10.8

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.camel:camel-neo4j >= 4.10.0, < 4.10.8 4.10.8 GHSA-4jrw-64vr-7g8m
Maven org.apache.camel:camel-neo4j >= 4.14.0, < 4.14.3 4.14.3 GHSA-4jrw-64vr-7g8m
Maven org.apache.camel:camel-neo4j >= 4.15.0, < 4.17.0 4.17.0 GHSA-4jrw-64vr-7g8m

Advisories 1

References