users  

Messages by Thread

• CVE-2026-78165: Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads Andrea Cosentino
• CVE-2026-85315: Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions Andrea Cosentino
• CVE-2026-84176: Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection Andrea Cosentino
• CVE-2026-80343: Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching Andrea Cosentino
• CVE-2026-79984: Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside Andrea Cosentino
• CVE-2026-85316: Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching Andrea Cosentino
• CVE-2026-78164: Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers Andrea Cosentino
• CVE-2026-85301: Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim Andrea Cosentino
• CVE-2026-85247: Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore Andrea Cosentino
• CVE-2026-85296: Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State Andrea Cosentino
• CVE-2026-85312: Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header Andrea Cosentino
• CVE-2026-85260: Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default Andrea Cosentino
• CVE-2026-78162: Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865) Andrea Cosentino
• CVE-2026-84181: Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse Andrea Cosentino
• CVE-2026-85251: Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets Andrea Cosentino
• CVE-2026-85254: Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing Andrea Cosentino
• CVE-2026-85250: Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option Andrea Cosentino
• CVE-2026-85246: Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions Andrea Cosentino
• CVE-2026-91858: Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present Andrea Cosentino
• CVE-2026-85313: Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set Andrea Cosentino
• CVE-2026-85249: Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata Andrea Cosentino
• CVE-2026-85257: Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions Andrea Cosentino
• CVE-2026-88901: Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default Andrea Cosentino
• CVE-2026-85317: Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache Andrea Cosentino
• CVE-2026-85314: Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584) Andrea Cosentino
• CVE-2026-85300: Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions Andrea Cosentino
• CVE-2026-85248: Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance Andrea Cosentino
• CVE-2026-85243: Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure Andrea Cosentino
• CVE-2026-71569: Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name Andrea Cosentino
• CVE-2026-85245: Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target Andrea Cosentino
• CVE-2026-84180: Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions Andrea Cosentino
• CVE-2026-84178: Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow Andrea Cosentino
• CVE-2026-83531: Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages Andrea Cosentino
• CVE-2026-80344: Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address Andrea Cosentino
• CVE-2026-80312: Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors Andrea Cosentino
• CVE-2026-79986: Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside Andrea Cosentino
• CVE-2026-79985: Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside Andrea Cosentino
• CVE-2026-79983: Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside Andrea Cosentino
• CVE-2026-78163: Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.23.0 Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.18.5 (LTS) Released Gregor Zurowski
• [D] Karavan 4.22.1 Bug: Component action buttons missing on Web UI [camel-karavan] via GitHub
• CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml Andrea Cosentino
• CVE-2026-103412: Apache Camel Karavan: project file name path traversal when committing a project to Git Andrea Cosentino
• [ANNOUNCEMENT] Apache Camel Karavan 4.22.1 Marat Gubaidullin
• CVE-2026-88789: Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening James Netherton
• [VOTE] Release Camel Kafka Connector 4.22.0 Andrea Cosentino
  • Re: [VOTE] Release Camel Kafka Connector 4.22.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Camel Kafka Connector 4.22.0 Andrea Cosentino
• Camel 4.21.0 Rest Issues Alistair Higdon
  • Re: Camel 4.21.0 Rest Issues Federico Mariani
  • Re: Camel 4.21.0 Rest Issues Alistair Higdon
• [VOTE] Release Apache Camel Kamelets 4.22.1 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.1 Jean-Baptiste Onofré
• [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Gregor Zurowski
  • Re: [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Andrea Cosentino
  • Re: [ANNOUNCE] Apache Camel 4.22.1 (LTS) Released Andrea Cosentino
• Batch JMS Consumer Marcus Ionker
  • Re: Batch JMS Consumer Federico Mariani
  • Re: Batch JMS Consumer Marcus Ionker
  • Re: Batch JMS Consumer Federico Mariani
  • Re: Batch JMS Consumer Marcus Ionker
  • Re: Batch JMS Consumer Federico Mariani
  • Re: Batch JMS Consumer Marcus Ionker via users
  • Re: Batch JMS Consumer Marcus Ionker
• Spring Boot Camel SFTP Consumer: How to apply setgid permissions to all directories created by SFTP autoCreate? Samhitha R Eega
  • Re: Spring Boot Camel SFTP Consumer: How to apply setgid permissions to all directories created by SFTP autoCreate? Claudio Miranda
• [ANNOUNCE] Apache Camel Karaf 4.18.4 has been released! Jean-Baptiste Onofré
• CVE-2026-80352: Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects Pasquale Congiusti
• CVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace Pasquale Congiusti
• CVE-2026-80351: Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod Pasquale Congiusti
• Camel REST - Http Responses with duplicate Content-Type headers - via Felix Jetty12 servlet Martin Lichtin via users
• Camel HTTP tries to gunzip when actually the response is already decoded Martin Lichtin via users
  • Re: Camel HTTP tries to gunzip when actually the response is already decoded Federico Mariani
  • Re: Camel HTTP tries to gunzip when actually the response is already decoded David Harris via users
• Recall: Camel 4.21.0 netty-http with Spring XML Jason Jackson
• CVE-2026-78329: Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes Andrea Cosentino
  • Camel 4.21.0 netty-http with Spring XML Jason Jackson
  • Re: Camel 4.21.0 netty-http with Spring XML Jason Jackson
  • Re: Camel 4.21.0 netty-http with Spring XML Jason Jackson
• [VOTE] Release Apache Camel Kamelets 4.22.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.22.0 Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.18.4 (LTS) Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.14.9 (LTS) Released Gregor Zurowski
• Reg. SFTP Consumer — native stability/min-age filtering to complement preSort Manikanta Bandaru
• [ANNOUNCE] Apache Camel 4.22.0 (LTS) Released Gregor Zurowski
• Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Marcus Ionker
  • Re: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Claus Ibsen
  • RE: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Marcus Ionker
  • Re: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Claus Ibsen
  • RE: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Marcus Ionker
  • RE: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Marcus Ionker
  • Re: Maybe a bug in GenericFilePollDynamicAware.resolveStaticUri Claus Ibsen
• XML Logging in adviceWith mutates RouteDefinition when using Endpoint DSL Valentin Brückel
  • Re: XML Logging in adviceWith mutates RouteDefinition when using Endpoint DSL Federico Mariani
• [VOTE] Release Apache Camel Kamelets 4.18.3 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.3 Marat Gubaidullin
• CVE-2026-40047: Apache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer Andrea Cosentino
• CVE-2026-40859: Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.14.8 (LTS) Released Gregor Zurowski
• Re: Camel Kafka consumer using the producer-only metadata.max.age.ms option Niranjan Kondru
  • Re: Camel Kafka consumer using the producer-only metadata.max.age.ms option Claus Ibsen
  • Re: Camel Kafka consumer using the producer-only metadata.max.age.ms option Niranjan Kondru
• [VOTE] Release Apache Camel Kamelets 4.21.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.21.0 Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.18.3 (LTS) Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.21.0 Released Gregor Zurowski
• High memory retention due to big BeanComponent cache Mirek Borsky
• Reg. SFTP Consumer pre sort capability by mtime: Manikanta Bandaru
• Over eager route syntax checker in VSCode. Knut-Håvard Aksnes
• [D] Environment variables in docker-compose.yaml file [camel-karavan] via GitHub
  • Re: [D] Environment variables in docker-compose.yaml file [camel-karavan] via GitHub
• Camel SJMS Auto Reconnection Issue with Oracle AQ KARTHIK PRABHU N
  • Re: Camel SJMS Auto Reconnection Issue with Oracle AQ Federico Mariani
  • Re: Camel SJMS Auto Reconnection Issue with Oracle AQ Federico Mariani
• Shaping the Future of Camel: How are you building on top of Camel in the Age of AI? Otavio Rodolfo Piske
• camel-milo - Support Custom DataTypes Xavier Gagnon
  • Re: camel-milo - Support Custom DataTypes Aurelien Pupier via users
  • Re: camel-milo - Support Custom DataTypes Andrea Cosentino
• https://camel.apache.org/security/CVE-2026-45760.html: CVE-2026-45760: Apache Camel K: Camel K Cross-Namespace Build Deputy Attack Pasquale Congiusti
• CamelPrint andrew goh via users
• [VOTE] Release Apache Camel Kamelets 4.18.2 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Claudio Miranda
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.2 Gaëlle Fournier
• [RESULT][VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
• [VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Claus Ibsen
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel Kamelets 4.20.0 Andrea Cosentino
• CVE-2026-40858: Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository Andrea Cosentino
• CVE-2026-40860: Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp Andrea Cosentino
• CVE-2026-40453: Apache Camel: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection Andrea Cosentino
• CVE-2026-40048: Apache Camel: Camel-PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager Andrea Cosentino
• CVE-2026-40473: Apache Camel: Camel-Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP Andrea Cosentino
• CVE-2026-33454: Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant) Andrea Cosentino
• CVE-2026-33453: Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution Andrea Cosentino
• CVE-2026-40022: Apache Camel: Camel-Platform-HTTP-Main: Authentication Bypass on Non-Root Context Paths in camel main runtime Andrea Cosentino
• CVE-2026-27172: Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.20.0 Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.14.7 (LTS) Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.18.2 (LTS) Released Gregor Zurowski
• [ANNOUNCE] Apache Camel 4.14.6 (LTS) Released Gregor Zurowski
• Link https://camel.apache.org/manual/camel-4x-upgrade-guide-4_19.html is broken Remi Roy via users
  • Re: Link https://camel.apache.org/manual/camel-4x-upgrade-guide-4_19.html is broken Pasquale Congiusti
  • Re: Link https://camel.apache.org/manual/camel-4x-upgrade-guide-4_19.html is broken Charlie Dennison
• [ANNOUNCE] Apache Camel 4.19.0 Released Gregor Zurowski
• Re: [D] Soap Karavan example [camel-karavan] via GitHub
  • Re: [D] Soap Karavan example [camel-karavan] via GitHub
• [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
  • Re: [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
  • Re: [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
  • Re: [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
  • Re: [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
  • Re: [D] Memory not being released by GC after exchange completion — heap keeps growing regardless of component used [camel-karavan] via GitHub
• [ANNOUNCEMENT] Apache Camel Karavan 4.18.1 Marat Gubaidullin
• [VOTE] Release Apache Camel K 2.10.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel K 2.10.0 Zineb Bendhiba
  • Re: [VOTE] Release Apache Camel K 2.10.0 Claudio Miranda
  • Re: [VOTE] Release Apache Camel K 2.10.0 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel K 2.10.0 Gaëlle Fournier
  • Re: [VOTE] Release Apache Camel K 2.10.0 Pasquale Congiusti
  • Re: [VOTE] Release Apache Camel K 2.10.0 Pasquale Congiusti
• [RESULT][VOTE] Release Apache Camel Kamelets 4.18.1 Andrea Cosentino
• [D] Why Karavan accepts only flat YAML structure for integration [camel-karavan] via GitHub
  • Re: [D] Why Karavan accepts only flat YAML structure for integration [camel-karavan] via GitHub
  • Re: [D] Why Karavan accepts only flat YAML structure for integration [camel-karavan] via GitHub
  • Re: [D] Why Karavan accepts only flat YAML structure for integration [camel-karavan] via GitHub
• [VOTE] Release Apache Camel Kamelets 4.18.1 Andrea Cosentino
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Federico Mariani
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 zineb bendhiba
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Otavio Rodolfo Piske
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Tom Cunningham
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Marat Gubaidullin
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Jean-Baptiste Onofré
  • Re: [VOTE] Release Apache Camel Kamelets 4.18.1 Gaëlle Fournier
• [RESULT][VOTE] Release Camel Kafka Connector 4.18.0 Andrea Cosentino
• [ANNOUNCE] Apache Camel 4.18.1 (LTS) Released Gregor Zurowski
• ServiceBusComponent: RejectedExecutionException during graceful shutdown after successful exchange completion Aleksandar Havran
  • Re: ServiceBusComponent: RejectedExecutionException during graceful shutdown after successful exchange completion Andrea Cosentino
• [VOTE] Release Camel Kafka Connector 4.18.0 Andrea Cosentino
  • Re: [VOTE] Release Camel Kafka Connector 4.18.0 Pasquale Congiusti
  • Re: [VOTE] Release Camel Kafka Connector 4.18.0 Zineb Bendhiba
  • Re: [VOTE] Release Camel Kafka Connector 4.18.0 Jon Anstey
  • Re: [VOTE] Release Camel Kafka Connector 4.18.0 Gaëlle Fournier
  • Re: [VOTE] Release Camel Kafka Connector 4.18.0 Federico Mariani
• Possible bug with platform-http and server.servlet.context-path Bed�rftig, Arne via users
  • Re: Possible bug with platform-http and server.servlet.context-path Federico Mariani
• Spring Framework update Santiago Acosta

• Earlier messages