Security
فارسی
All products

Red Hat build of Apache Camel 4 for Quarkus 3/camel-mail

Red Hat · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Camel's Camel-Mail component is vulnerable to Camel message header injectionCVE-2026-33454 · GHSA-2VQF-X7G4-7C2G org.apache.camel:camel-mailRed Hat build of Apache Camel 4 for Quarkus 3/camel-mail MavenRed Hat Critical Fix reported
Apache Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabledCVE-2026-59230 · GHSA-CX47-QXP5-MMH2 org.apache.camel:camel-mailRed Hat Fuse 7/camel-mail MavenRed Hat Medium Fix reported
Apache Camel-Mail: The mail producer applied attacker-supplied mail.smtp.* / mail.smtps.* message headers as JavaMail session propertiesCVE-2026-46584 · GHSA-29VJ-9MGP-MWP2 org.apache.camel:camel-mailRed Hat build of Apache Camel 4 for Quarkus 3/camel-mail MavenRed Hat Low Fix reported
org.apache.camel/camel-mail: camel-mail: Email configuration manipulation via unfiltered multipart headersCVE-2026-85314 Red Hat Fuse 7/camel-mailRed Hat build of Apache Camel 4 for Quarkus 3/camel-mail Red Hat Medium No fix reported