Apache Software Foundation Apache Camel Google PubSub vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache Camel Google PubSub, newest first. Follow to get an email when a new one appears.

1 results

9.9Critical

CVE-2026-40453 6 months ago

Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection

Apache Software Foundation Apache Camel JMS; Apache Software Foundation Apache Camel CoAP; Apache Software Foundation Apache Camel Google PubSub; Red Hat Red Hat Build of Apache Camel 4.14 for Quarkus 3.27

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'. The same setLowerCase(true) call was not applied to…

2.1%EPSS