oscerd opened a new pull request, #1830: URL: https://github.com/apache/camel-website/pull/1830
Adds the security advisory page for CVE-2026-71569. | CVE | Severity | CWE | Component / issue | Fixed in | |---|---|---|---|---| | CVE-2026-71569 | MEDIUM 4.8 | CWE-918 | camel-a2a — Push notification webhook guard accepts IPv6 unique local addresses (fc00::/7) | 4.22.2 and 4.23.0 | Both releases carrying the fix (4.22.2 and 4.23.0) are available on Maven Central. The advisory ships as `content/security/CVE-2026-71569.md` along with its matching `CVE-2026-71569.txt.asc`, clear-signed with key `27663406EB6DBAF5291F2615E34E9F3802FF4100` (Andrea Cosentino). References: - JIRA: https://issues.apache.org/jira/browse/CAMEL-24371 - Main fix (4.23.0): https://github.com/apache/camel/pull/25406 (commit 54041cce545322f7ff1bb362ecc02999b3d96ba0) - Backport 4.22.x (4.22.2): https://github.com/apache/camel/pull/26583 (commit c4a5c5fc968763474d0c6b0f8d840cee68c09142) Antigravity on behalf of oscerd 🤖 Generated with Antigravity -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
