dev  

Messages by Thread

• CVE-2026-48203: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields Andrea Cosentino
• CVE-2026-48205: Apache Camel: Camel-DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect DNS queries to an attacker-controlled server (server-side request forgery) and enumerate internal Andrea Cosentino
• CVE-2026-48206: Apache Camel: Camel-JIRA: A set of non-Camel-prefixed Exchange header constants (IssueKey, ProjectKey, IssueTransitionId, ...) bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials Andrea Cosentino
• CVE-2026-49086: Apache Camel: Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to redirect the re-published message to an arbitrary Dapr Pub/Su Andrea Cosentino
• CVE-2026-49098: Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic Andrea Cosentino
• CVE-2026-49097: Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users Andrea Cosentino
• CVE-2026-49099: Apache Camel: Camel-Salesforce: Non-Camel-prefixed Exchange header constants (sObjectQuery, sObjectSearch, apexUrl, ...) bypass the HTTP header filter, allowing an HTTP client to inject SOQL/SOSL queries, override the target SObject, and redirect Apex REST calls using t Andrea Cosentino
• CVE-2026-49365: Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients Andrea Cosentino
• CVE-2026-53913: Apache Camel: Camel-Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration (no required roles or permissions) the token is never verified and any non-null bearer value is accepted - a Andrea Cosentino
• CVE-2026-55993: Apache Camel: Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling server-side request forgery and disclosure of secr Andrea Cosentino
• CVE-2026-55994: Apache Camel: Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling server-side request forgery and disclosure of secrets when bridged Andrea Cosentino
• CVE-2026-56139: Apache Camel: Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients - and the option was not honoured Andrea Cosentino
• CVE-2026-56140: Apache Camel: Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components; because camel-aws2-sns is producer-only (no consumer) there is no reachable inbound header-injection path, so this is a defense-in- Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.14.8 (LTS) Released Gregor Zurowski
• [VOTE] Release Apache Camel Kamelets 4.21.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.18.3 (LTS) Released Gregor Zurowski
• [HEADS UP] - Main is now 4.22.0-SNAPSHOT Claus Ibsen
• Kamelets for 4.21 release Claus Ibsen
  • Re: Kamelets for 4.21 release Andrea Cosentino
  • Re: Kamelets for 4.21 release Marat Gubaidullin
  • Re: Kamelets for 4.21 release Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.21.0 Released Gregor Zurowski
• Camel 4.21 whats new blog Claus Ibsen
• [REPORT] Monthly Camel static code analysis - 2026/06 Pasquale Congiusti
• GitHub CI Usage - June 2026 Aurelien Pupier via dev
• Camel 4.22 LTS in August Claus Ibsen
  • Re: Camel 4.22 LTS in August Gregor Zurowski
  • Re: Camel 4.22 LTS in August Claus Ibsen
  • Re: Camel 4.22 LTS in August Claus Ibsen
  • Re: Camel 4.22 LTS in August Claus Ibsen
  • Re: Camel 4.22 LTS in August Claus Ibsen
  • Re: Camel 4.22 LTS in August Gregor Zurowski
• [VOTE] Release Apache Camel 4.14.8 (LTS) Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.14.8 (LTS) Otavio Rodolfo Piske
  • Re: [VOTE] Release Apache Camel 4.14.8 (LTS) Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.14.8 (LTS) Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel 4.14.8 (LTS) Andrea Cosentino
  • Re: [VOTE] Release Apache Camel 4.14.8 (LTS) Gregor Zurowski
  • [RESULT] [VOTE] Release Apache Camel 4.14.8 (LTS) Gregor Zurowski
• [VOTE] Release Apache Camel 4.18.3 (LTS) Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Alexandre Gallice
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Andrea Cosentino
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Federico Mariani
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Tom Cunningham
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Otavio Rodolfo Piske
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel 4.18.3 (LTS) Gregor Zurowski
  • [RESULT] [VOTE] Release Apache Camel 4.18.3 (LTS) Gregor Zurowski
• [VOTE] Release Apache Camel 4.21.0 (LTS) Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Federico Mariani
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Andrea Cosentino
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Alexandre Gallice
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Otavio Rodolfo Piske
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Tom Cunningham
  • Re: [VOTE] Release Apache Camel 4.21.0 (LTS) Gregor Zurowski
  • [RESULT] [VOTE] Release Apache Camel 4.21.0 Gregor Zurowski
• [HEADS UP] - Working on documentation Claus Ibsen
• Local copies of opensaml in git Claus Ibsen
  • Re: Local copies of opensaml in git Claus Ibsen
• Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Gregor Zurowski
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Gregor Zurowski
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Claus Ibsen
  • Re: Camel patch releases in June Gregor Zurowski
  • Re: Camel patch releases in June Claus Ibsen
• Community over Code Glasgow 2026 Hackathon - Next Steps Bowen, Rich
• GitHub CI usage - May 2026 Aurelien Pupier via dev
• Shaping the Future of Camel: How are you building on top of Camel in the Age of AI? Otavio Rodolfo Piske
• [REPORT] Monthly Camel static code analysis - 2026/05 Pasquale Congiusti
• [RESULT] [VOTE] Release Apache Camel Quarkus 3.36.0 Zineb Bendhiba
• [VOTE] Release Apache Camel Quarkus 3.36.0 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Alexandre Gallice
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 James Netherton
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Quarkus 3.36.0 Zineb Bendhiba
• [VOTE] Release Apache Camel Karaf 4.14.7 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Nicolas Filotto
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Karaf 4.14.7 Gaëlle Fournier
  • [RESULT][VOTE] Release Apache Camel Karaf 4.14.7 Jean-Baptiste Onofré
• Dependencies which are not updated to the latest version Aurelien Pupier via dev
• [VOTE] Release Apache Camel Karaf 4.18.2 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Nicolas Filotto
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Karaf 4.18.2 Gaëlle Fournier
  • [RESULT][VOTE] Release Apache Camel Karaf 4.18.2 Jean-Baptiste Onofré
• CVE-2026-47323: Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering Andrea Cosentino
• [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Claudio Miranda
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Claus Ibsen
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel K 2.10.1, 2.9.2 and 2.8.1 Jean-Baptiste Onofré
• Deprecate old camel k runtime repository Pasquale Congiusti
• [VOTE] Release Apache Camel Kamelets 4.18.2 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Claudio Miranda
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Andrea Cosentino
• [RESULT][VOTE] Release Apache Camel Quarkus 3.27.4 James Netherton
• [RESULT][VOTE] Release Apache Camel Quarkus 3.33.1 James Netherton
• [VOTE] Release Apache Camel Quarkus 3.27.4 James Netherton
  • Re: [VOTE] Release Apache Camel Quarkus 3.27.4 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Quarkus 3.27.4 Alexandre Gallice
  • Re: [VOTE] Release Apache Camel Quarkus 3.27.4 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Quarkus 3.27.4 James Netherton
• Hackathon at Community Over Code Glasgow 2026 — interest from Camel? Jarek Potiuk
  • Re: Hackathon at Community Over Code Glasgow 2026 — interest from Camel? Sandeep N
• [VOTE] Release Apache Camel Quarkus 3.33.1 James Netherton
  • Re: [VOTE] Release Apache Camel Quarkus 3.33.1 Alexandre Gallice
  • Re: [VOTE] Release Apache Camel Quarkus 3.33.1 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Quarkus 3.33.1 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Quarkus 3.33.1 James Netherton
  • Re: [VOTE] Release Apache Camel Quarkus 3.33.1 Andrea Cosentino
• [FEEDBACK] - JSpecify in camel-api Claus Ibsen
  • Re: [FEEDBACK] - JSpecify in camel-api Andrea Cosentino
  • Re: [FEEDBACK] - JSpecify in camel-api Claus Ibsen
  • Re: [FEEDBACK] - JSpecify in camel-api Claus Ibsen
• [RESULT][VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
• [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Jiří Ondrušek
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Federico Mariani
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Tom Cunningham
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Claus Ibsen
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Gregor Zurowski
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 (Second Attempt) Federico Mariani
• [CANCELLED][VOTE] Release Apache Camel Upgrade Recipes 4.20.0 Jiří Ondrušek
• [REPORT] Monthly Camel static code analysis - 2026/04 Pasquale Congiusti
• [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 Jiří Ondrušek
  • Re: [VOTE] Release Apache Camel Upgrade Recipes 4.20.0 Claus Ibsen
• [VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
• Kamelets releases for latest patch releases Claus Ibsen
  • Re: Kamelets releases for latest patch releases Andrea Cosentino
• [RESULT][VOTE] Release Apache Camel Quarkus 3.35.0 James Netherton
• [ANNOUNCE] Apache Camel 4.20.0 Released Gregor Zurowski
• [RESULT] [VOTE] Release Apache Camel 4.20.0 Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.14.7 (LTS) Released Gregor Zurowski
• [RESULT] [VOTE] Release Apache Camel 4.14.7 (LTS) Gregor Zurowski
• [VOTE] Release Apache Camel Quarkus 3.35.0 James Netherton
  • Re: [VOTE] Release Apache Camel Quarkus 3.35.0 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Quarkus 3.35.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Quarkus 3.35.0 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Quarkus 3.35.0 Alexandre Gallice
  • Re: [VOTE] Release Apache Camel Quarkus 3.35.0 Peter Palaga
• [VOTE] Release Apache Camel 4.20.0 Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.20.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel 4.20.0 Benjamin Graf
  • Re: [VOTE] Release Apache Camel 4.20.0 Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.20.0 Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.20.0 James Netherton
  • Re: [VOTE] Release Apache Camel 4.20.0 Gregor Zurowski
• [VOTE] Release Apache Camel 4.14.7 (LTS) Gregor Zurowski
  • Re: [VOTE] Release Apache Camel 4.14.7 (LTS) Claus Ibsen
  • Re: [VOTE] Release Apache Camel 4.14.7 (LTS) Andrea Cosentino
  • Re: [VOTE] Release Apache Camel 4.14.7 (LTS) Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel 4.14.7 (LTS) Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.18.2 (LTS) Released Gregor Zurowski
• Error preparing 4.20.0 release Gregor Zurowski
  • Re: Error preparing 4.20.0 release Federico Mariani
  • Re: Error preparing 4.20.0 release Aurelien Pupier via dev
• [VOTE] Release Apache Camel 4.18.2 (LTS) Gregor Zurowski

• Earlier messages
• Later messages