Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Apache Camel has an incomplete fix for CVE-2025-27636

Fix availableCritical · CVSS 9.9EPSS 1.9%

Published Apr 27, 2026 · updated Oct 5, 2026

What to do

  1. Upgrade to a fixed version: org.apache.camel:camel-coap 4.14.6, org.apache.camel:camel-coap 4.18.2, org.apache.camel:camel-coap 4.20.0, org.apache.camel:camel-google-pubsub 4.14.6 (see table).
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Mavenorg.apache.camel:camel-coap

Vulnerable versions
>= 3.0.0, < 4.14.6
Fixed in
4.14.6

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-coap

Mavenorg.apache.camel:camel-coap

Vulnerable versions
>= 4.15.0, < 4.18.2
Fixed in
4.18.2

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-coap

Mavenorg.apache.camel:camel-coap

Vulnerable versions
>= 4.19.0, < 4.20.0
Fixed in
4.20.0

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-coap

Mavenorg.apache.camel:camel-google-pubsub

Vulnerable versions
>= 3.0.0, < 4.14.6
Fixed in
4.14.6

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-google-pubsub

Mavenorg.apache.camel:camel-google-pubsub

Vulnerable versions
>= 4.15.0, < 4.18.2
Fixed in
4.18.2

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-google-pubsub

Mavenorg.apache.camel:camel-google-pubsub

Vulnerable versions
>= 4.19.0, < 4.20.0
Fixed in
4.20.0

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-google-pubsub

Mavenorg.apache.camel:camel-jms

Vulnerable versions
>= 3.0.0, < 4.14.6
Fixed in
4.14.6

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-jms

Mavenorg.apache.camel:camel-jms

Vulnerable versions
>= 4.15.0, < 4.18.2
Fixed in
4.18.2

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-jms

Mavenorg.apache.camel:camel-jms

Vulnerable versions
>= 4.19.0, < 4.20.0
Fixed in
4.20.0

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-jms

Mavenorg.apache.camel:camel-sjms

Vulnerable versions
>= 3.0.0, < 4.14.6
Fixed in
4.14.6

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-sjms

Mavenorg.apache.camel:camel-sjms

Vulnerable versions
>= 4.15.0, < 4.18.2
Fixed in
4.18.2

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-sjms

Mavenorg.apache.camel:camel-sjms

Vulnerable versions
>= 4.19.0, < 4.20.0
Fixed in
4.20.0

Check your project: mvn dependency:tree -Dincludes=org.apache.camel:camel-sjms

Sources

CWE-178 Improper Handling of Case Sensitivity

← All critical vulnerabilities