Apache Software Foundation Apache Camel vulnerabilities
82 known vulnerabilities affecting apache_software_foundation/apache_camel.
Total CVEs
82
CISA KEV
0
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL14HIGH30MEDIUM37LOW1
Vulnerabilities
Page 5 of 5
CVE-2026-95663MEDIUMCVSS 4.8≥ 4.16.0, < 4.18.5≥ 4.19.0, < 4.22.22026-10-26
CVE-2026-95663 [MEDIUM] CWE-613 CVE-2026-95663: Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affe
Insufficient Session Expiration vulnerability in Apache Camel Keycloak component.
This issue affects Apache Camel: from 4.16.0 before 4.18.5, from 4.19.0 before 4.22.2.
When token introspection is enabled on the camel-keycloak KeycloakSecurityPolicy (useTokenIntrospection=true), the security processor validates the access token of a request by send
nvd
CVE-2026-94386MEDIUMCVSS 4.8≥ 4.19.0, < 4.22.22026-10-26
CVE-2026-94386 [MEDIUM] CWE-524 CVE-2026-94386: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. This
Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component.
This issue affects Apache Camel: from 4.19.0 before 4.22.2.
OAuthClientCredentialsTokenResolver obtains OAuth 2.0 bearer tokens through the client credentials grant on behalf of the components that authenticate their outbound calls with a named OAuth profil
nvd
← Previous5 / 5