dev  

Messages by Date

• 2026/09/18 [VOTE] Release Camel Kafka Connector 4.22.0 Andrea Cosentino
• 2026/09/17 Re: [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Andrea Cosentino
• 2026/09/17 Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Pasquale Congiusti
• 2026/09/17 Re: [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Andrea Cosentino
• 2026/09/17 Re: [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released BIHANIC, LAURENT - [Magellan]
• 2026/09/17 Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Claus Ibsen
• 2026/09/17 [VOTE] Release Apache Camel Kamelets 4.22.1 Andrea Cosentino
• 2026/09/17 [RESULT][VOTE] Release Apache Camel Quarkus 3.33.3 Jiří Ondrušek
• 2026/09/17 [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Gregor Zurowski
• 2026/09/17 [RESULT] [VOTE] Release Apache Camel 4.22.1 (LTS) Gregor Zurowski
• 2026/09/17 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Gregor Zurowski
• 2026/09/16 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Zineb Bendhiba
• 2026/09/16 Re: [VOTE] Release Apache Camel Quarkus 3.33.3 Zineb Bendhiba
• 2026/09/15 Re: Hackathon at Community over Code Glasgow — schedule slot needed Andrea Cosentino
• 2026/09/15 Re: Hackathon at Community over Code Glasgow — schedule slot needed Cynthia Omovoiye
• 2026/09/15 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Gaëlle Fournier
• 2026/09/15 Re: [VOTE] Release Apache Camel Quarkus 3.33.3 Gaëlle Fournier
• 2026/09/15 Hackathon at Community over Code Glasgow — schedule slot needed Rich Bowen
• 2026/09/14 Re: [VOTE] Release Apache Camel Quarkus 3.33.3 Claus Ibsen
• 2026/09/14 Appeal regarding denied Jira account request - [email protected] Hesanda Nimneth
• 2026/09/14 Re: [VOTE] Release Apache Camel Quarkus 3.33.3 James Netherton
• 2026/09/14 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) James Netherton
• 2026/09/14 [ANNOUNCE] Apache Camel Karaf 4.18.4 has been released! Jean-Baptiste Onofré
• 2026/09/14 Re: [VOTE] Release Apache Camel Quarkus 3.33.3 Alexandre Gallice
• 2026/09/14 [VOTE] Release Apache Camel Quarkus 3.33.3 Jiří Ondrušek
• 2026/09/14 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Loris Boiteux
• 2026/09/14 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Andrea Cosentino
• 2026/09/14 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Federico Mariani
• 2026/09/13 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Alexandre Gallice
• 2026/09/13 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Claus Ibsen
• 2026/09/13 Re: [VOTE] Release Apache Camel 4.22.1 (LTS) Marat Gubaidullin
• 2026/09/13 [VOTE] Release Apache Camel 4.22.1 (LTS) Gregor Zurowski
• 2026/09/12 [RESULT][VOTE] Release Apache Camel Karaf 4.18.4 Jean-Baptiste Onofré
• 2026/09/12 Re: New Apache Camel website front page Claus Ibsen
• 2026/09/12 Re: New Apache Camel website front page Claus Ibsen
• 2026/09/12 Re: Camel 4.22.1 patch release Claus Ibsen
• 2026/09/11 Re: Camel 4.22.1 patch release Gregor Zurowski
• 2026/09/11 Re: Camel 4.22.1 patch release Claus Ibsen
• 2026/09/11 Re: New Apache Camel website front page Otavio Rodolfo Piske
• 2026/09/11 Re: Camel 4.22.1 patch release Gregor Zurowski
• 2026/09/11 Re: Camel 4.22.1 patch release Claus Ibsen
• 2026/09/11 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Loris Boiteux
• 2026/09/11 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Jean-Baptiste Onofré
• 2026/09/10 Re: Camel 4.22.1 patch release Claus Ibsen
• 2026/09/10 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Pasquale Congiusti
• 2026/09/10 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Zineb Bendhiba
• 2026/09/09 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Claus Ibsen
• 2026/09/09 RE: [VOTE] Release Apache Camel Karaf 4.18.4 Nicolas Filotto
• 2026/09/09 Re: [VOTE] Release Apache Camel Karaf 4.18.4 Andrea Cosentino
• 2026/09/09 RE: New Apache Camel website front page Nicolas Filotto
• 2026/09/09 [VOTE] Release Apache Camel Karaf 4.18.4 Jean-Baptiste Onofré
• 2026/09/09 Re: New Apache Camel website front page Jean-Baptiste Onofré
• 2026/09/09 Re: New Apache Camel website front page Andrea Cosentino
• 2026/09/09 Re: Upgrade guides ONLY on main Claus Ibsen
• 2026/09/09 Re: New Apache Camel website front page Claus Ibsen
• 2026/09/08 Re: Customize 404/405 response body when using REST OpenApi component Pontus Ullgren
• 2026/09/08 Re: Camel 4.22.1 patch release Claus Ibsen
• 2026/09/08 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Pasquale Congiusti
• 2026/09/08 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Claus Ibsen
• 2026/09/07 Re: Camel 4.22.1 patch release Gregor Zurowski
• 2026/09/07 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Pasquale Congiusti
• 2026/09/07 Upgrade guides ONLY on main Claus Ibsen
• 2026/09/07 New Apache Camel website front page Claus Ibsen
• 2026/09/05 Re: Customize 404/405 response body when using REST OpenApi component Claus Ibsen
• 2026/09/04 Hackathon room schedule — please claim your slot Rich Bowen
• 2026/09/03 [REPORT] Monthly Camel static code analysis - 2026/08 Pasquale Congiusti
• 2026/09/01 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Gaëlle Fournier
• 2026/09/01 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Jean-Baptiste Onofré
• 2026/09/01 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Andrea Cosentino
• 2026/09/01 Re: [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Claudio Miranda
• 2026/09/01 Camel 4.22.1 patch release Claus Ibsen
• 2026/08/31 [VOTE] Release Apache Camel K 2.11.0, 2.10.2 and 2.9.3 Pasquale Congiusti
• 2026/08/31 GitHub CI Usage - August 2026 Aurelien Pupier via dev
• 2026/08/31 Customize 404/405 response body when using REST OpenApi component Pontus Ullgren
• 2026/08/30 [RESULT] [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Jiří Ondrušek
• 2026/08/27 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Jean-Baptiste Onofré
• 2026/08/27 Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Andrea Cosentino
• 2026/08/26 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Federico Mariani
• 2026/08/26 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Claus Ibsen
• 2026/08/26 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Andrea Cosentino
• 2026/08/26 [VOTE] Release Apache Camel Upgrade Recipes 4.22.0 Jiří Ondrušek
• 2026/08/24 CVE-2026-60093: Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir Andrea Cosentino
• 2026/08/24 CVE-2026-59230: Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled Andrea Cosentino
• 2026/08/24 CVE-2026-66908: Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted Andrea Cosentino
• 2026/08/24 CVE-2026-71300: Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection Andrea Cosentino
• 2026/08/24 CVE-2026-66907: Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result Andrea Cosentino
• 2026/08/24 CVE-2026-66906: Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir Andrea Cosentino
• 2026/08/24 CVE-2026-63621: Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy Andrea Cosentino
• 2026/08/24 Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Federico Mariani
• 2026/08/24 Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Claus Ibsen
• 2026/08/24 Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Pasquale Congiusti
• 2026/08/24 [VOTE] Release Apache Camel Kamelets 4.22.0 Andrea Cosentino
• 2026/08/23 [RESULT][VOTE] Release Apache Camel Quarkus 3.39.0 Jiří Ondrušek
• 2026/08/21 Re: [VOTE] Release Apache Camel Quarkus 3.39.0 Gaëlle Fournier
• 2026/08/20 Re: [VOTE] Release Apache Camel Quarkus 3.39.0 Andrea Cosentino
• 2026/08/20 Re: [VOTE] Release Apache Camel Quarkus 3.39.0 Pasquale Congiusti
• 2026/08/20 Re: [VOTE] Release Apache Camel Quarkus 3.39.0 James Netherton
• 2026/08/20 Re: [VOTE] Release Apache Camel Quarkus 3.39.0 Alexandre Gallice
• 2026/08/20 [VOTE] Release Apache Camel Quarkus 3.39.0 Jiří Ondrušek
• 2026/08/17 Community over Code Glasgow 2026 Hackathon - Action Needed Bowen, Rich
• 2026/08/17 [ANNOUNCE] Apache Camel 4.18.4 (LTS) Released Gregor Zurowski
• 2026/08/16 [RESULT] [VOTE] Release Apache Camel 4.18.4 (LTS) Gregor Zurowski
• 2026/08/16 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Gregor Zurowski
• 2026/08/16 [ANNOUNCE] Apache Camel 4.14.9 (LTS) Released Gregor Zurowski
• 2026/08/16 [RESULT] [VOTE] Release Apache Camel 4.14.9 (LTS) Gregor Zurowski
• 2026/08/15 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Gregor Zurowski
• 2026/08/14 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Gaëlle Fournier
• 2026/08/14 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Gaëlle Fournier
• 2026/08/13 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Andrea Cosentino
• 2026/08/13 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Babak Vahdat
• 2026/08/13 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Andrea Cosentino
• 2026/08/13 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Claus Ibsen
• 2026/08/13 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Marat Gubaidullin
• 2026/08/11 [ANNOUNCE] Apache Camel 4.22.0 (LTS) Released Gregor Zurowski
• 2026/08/11 [RESULT] [VOTE] Release Apache Camel 4.22.0 (LTS) Gregor Zurowski
• 2026/08/11 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Federico Mariani
• 2026/08/11 Re: [VOTE] Release Apache Camel 4.18.4 (LTS) Claus Ibsen
• 2026/08/11 Re: [VOTE] Release Apache Camel 4.14.9 (LTS) Claus Ibsen
• 2026/08/11 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Gregor Zurowski
• 2026/08/11 [VOTE] Release Apache Camel 4.18.4 (LTS) Gregor Zurowski
• 2026/08/11 [VOTE] Release Apache Camel 4.14.9 (LTS) Gregor Zurowski
• 2026/08/10 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) James Netherton
• 2026/08/10 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Pasquale Congiusti
• 2026/08/09 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Claus Ibsen
• 2026/08/08 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Gaëlle Fournier
• 2026/08/08 [FEEDBACK] - Blog whats new 4.22 Claus Ibsen
• 2026/08/08 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Federico Mariani
• 2026/08/08 Camel patch releases 4.18.4 and 4.14.9 Claus Ibsen
• 2026/08/08 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Andrea Cosentino
• 2026/08/08 Re: [VOTE] Release Apache Camel 4.22.0 (LTS) Marat Gubaidullin
• 2026/08/08 [VOTE] Release Apache Camel 4.22.0 (LTS) Gregor Zurowski
• 2026/08/07 Re: Camel 4.22 LTS in August Gregor Zurowski
• 2026/08/07 Re: Camel 4.22 LTS in August Claus Ibsen
• 2026/08/06 Re: Camel 4.22 LTS in August Claus Ibsen
• 2026/08/06 Re: Camel 4.22 LTS in August Claus Ibsen
• 2026/08/03 Hackathon task list needed - 10 weeks out Bowen, Rich
• 2026/07/31 Introduction - integration engineer interested in contributing, healthcare components vishal khobare
• 2026/07/31 GitHub CI Usage - July 2026 Aurelien Pupier via dev
• 2026/07/31 [REPORT] Monthly Camel static code analysis - 2026/07 Pasquale Congiusti
• 2026/07/28 Re: Camel 4.22 LTS in August Claus Ibsen
• 2026/07/26 [RESULT][VOTE] Release Apache Camel Quarkus 3.38.0 James Netherton
• 2026/07/23 Re: [VOTE] Release Apache Camel Quarkus 3.38.0 Alexandre Gallice
• 2026/07/23 Re: [VOTE] Release Apache Camel Quarkus 3.38.0 Andrea Cosentino
• 2026/07/23 Re: [VOTE] Release Apache Camel Quarkus 3.38.0 Zineb Bendhiba
• 2026/07/23 Re: [VOTE] Release Apache Camel Quarkus 3.38.0 Claus Ibsen
• 2026/07/23 Re: [VOTE] Release Apache Camel Quarkus 3.38.0 Aurelien Pupier via dev
• 2026/07/23 [VOTE] Release Apache Camel Quarkus 3.38.0 James Netherton
• 2026/07/17 [RESULT] [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Jiří Ondrušek
• 2026/07/17 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Otavio Rodolfo Piske
• 2026/07/17 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Babak Vahdat
• 2026/07/17 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Andrea Cosentino
• 2026/07/17 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Jiří Ondrušek
• 2026/07/17 Re: [VOTE] Release Apache Camel Kamelets 4.18.3 Andrea Cosentino
• 2026/07/16 CAMEL-23382: Unified AI tool abstraction (camel-ai-tool) - Heads-up Zineb Bendhiba
• 2026/07/14 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Gaëlle Fournier
• 2026/07/14 Re: [VOTE] Release Apache Camel Kamelets 4.18.3 Gaëlle Fournier
• 2026/07/14 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Claus Ibsen
• 2026/07/14 Re: [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Federico Mariani
• 2026/07/14 [VOTE] Release Apache Camel Upgrade Recipes 4.21.0 Jiří Ondrušek
• 2026/07/13 Re: [VOTE] Release Apache Camel Kamelets 4.18.3 Marat Gubaidullin
• 2026/07/13 Re: [VOTE] Release Apache Camel Kamelets 4.18.3 Claus Ibsen
• 2026/07/13 [VOTE] Release Apache Camel Kamelets 4.18.3 Andrea Cosentino
• 2026/07/13 [RESULT][VOTE] Release Apache Camel Quarkus 3.33.2 Jiří Ondrušek
• 2026/07/12 [RESULT][VOTE] Release Apache Camel Quarkus 3.27.5 Jiří Ondrušek
• 2026/07/10 Re: Kamelets for 4.21 release Andrea Cosentino
• 2026/07/10 Re: Kamelets for 4.21 release Marat Gubaidullin
• 2026/07/08 Re: [VOTE] Release Apache Camel Quarkus 3.33.2 James Netherton
• 2026/07/08 Re: [VOTE] Release Apache Camel Quarkus 3.33.2 Zineb Bendhiba
• 2026/07/08 Re: [VOTE] Release Apache Camel Quarkus 3.33.2 Claus Ibsen
• 2026/07/08 [VOTE] Release Apache Camel Quarkus 3.33.2 Jiří Ondrušek
• 2026/07/08 Re: [VOTE] Release Apache Camel Quarkus 3.27.5 Zineb Bendhiba
• 2026/07/07 Re: [VOTE] Release Apache Camel Quarkus 3.27.5 Claus Ibsen
• 2026/07/07 Re: [VOTE] Release Apache Camel Quarkus 3.27.5 James Netherton
• 2026/07/07 [VOTE] Release Apache Camel Quarkus 3.27.5 Jiří Ondrušek
• 2026/07/06 Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Andrea Cosentino
• 2026/07/06 CVE-2026-49042: Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters Federico Mariani
• 2026/07/06 CVE-2026-46588: Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input Federico Mariani
• 2026/07/06 CVE-2026-46587: Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input Federico Mariani
• 2026/07/06 CVE-2026-43867: Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter Andrea Cosentino
• 2026/07/06 CVE-2026-43866: Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder Andrea Cosentino
• 2026/07/05 CVE-2026-42527: Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure Andrea Cosentino
• 2026/07/05 CVE-2026-46453: Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation Andrea Cosentino
• 2026/07/05 CVE-2026-43865: Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution Andrea Cosentino
• 2026/07/05 CVE-2026-46454: Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers Andrea Cosentino
• 2026/07/05 CVE-2026-46455: Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted Andrea Cosentino
• 2026/07/05 CVE-2026-46456: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers Andrea Cosentino
• 2026/07/05 CVE-2026-46457: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers Andrea Cosentino
• 2026/07/05 CVE-2026-46584: Apache Camel: Camel-Mail: The mail producer applied attacker-supplied mail.smtp.* / mail.smtps.* message headers as JavaMail session properties, allowing an attacker to weaken the SMTP transport security and, on releases before 4.19.0, redirect the connection and steal Andrea Cosentino
• 2026/07/05 CVE-2026-46585: Apache Camel: Camel-Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query Andrea Cosentino
• 2026/07/05 CVE-2026-46590: Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048) Andrea Cosentino
• 2026/07/05 CVE-2026-46591: Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169) Andrea Cosentino
• 2026/07/05 CVE-2026-46592: Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation Andrea Cosentino
• 2026/07/05 CVE-2026-46726: Apache Camel: Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling server-side request forgery and disclosure of Andrea Cosentino
• 2026/07/05 CVE-2026-48204: Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration Andrea Cosentino
• 2026/07/05 CVE-2026-48203: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields Andrea Cosentino
• 2026/07/05 CVE-2026-48205: Apache Camel: Camel-DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect DNS queries to an attacker-controlled server (server-side request forgery) and enumerate internal Andrea Cosentino
• 2026/07/05 CVE-2026-48206: Apache Camel: Camel-JIRA: A set of non-Camel-prefixed Exchange header constants (IssueKey, ProjectKey, IssueTransitionId, ...) bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials Andrea Cosentino
• 2026/07/05 CVE-2026-49086: Apache Camel: Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to redirect the re-published message to an arbitrary Dapr Pub/Su Andrea Cosentino
• 2026/07/05 CVE-2026-49098: Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic Andrea Cosentino
• 2026/07/05 CVE-2026-49097: Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users Andrea Cosentino

• Earlier messages
• Later messages