Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Fix availableCritical · CVSS 9.8EPSS 1.6%

Published May 19, 2026 · updated Oct 5, 2026

What to do

  1. Upgrade to a fixed version: org.apache.camel:camel-cxf-rest 4.14.6, org.apache.camel:camel-cxf-rest 4.18.2.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Mavenorg.apache.camel:camel-cxf-rest

Vulnerable versions
>= 3.18.0, < 4.14.6
Fixed in
4.14.6

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-cxf-rest

Mavenorg.apache.camel:camel-cxf-rest

Vulnerable versions
>= 4.15.0, < 4.18.2
Fixed in
4.18.2

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-cxf-rest

Sources

CWE-178 Improper Handling of Case Sensitivity · CWE-791 Incomplete Filtering of Special Elements

← All critical vulnerabilities