org.apache.camel:camel-mail
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Camel's Camel-Mail component is vulnerable to Camel message header injection | org.apache.camel:camel-mailRed Hat build of Apache Camel 4 for Quarkus 3/camel-mail | MavenRed Hat | Critical | Fix reported | |
| Apache Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled | org.apache.camel:camel-mailRed Hat Fuse 7/camel-mail | MavenRed Hat | Medium | Fix reported | |
| Apache Camel-Mail: The mail producer applied attacker-supplied mail.smtp.* / mail.smtps.* message headers as JavaMail session properties | org.apache.camel:camel-mailRed Hat build of Apache Camel 4 for Quarkus 3/camel-mail | MavenRed Hat | Low | Fix reported | |
| Apache Camel's Mail is vulnerable to path traversal | org.apache.camel:camel-mailRed Hat JBoss Data Virtualization 6/switchyard | MavenRed Hat | Medium | Fix reported |