Apache Camel K

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 10, 2026
Last mentionedSep 10, 2026

Timeline

3 articles · newest first

CVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

Apache Camel K CVE-2026-80354 lets tenants reference secrets by name in the operator namespace, exposing other tenants' secrets.

oss-securitySep 10, 14:10 UTC · Sep 10, 2026VulnerabilityCVE-2026-803542

CVE-2026-80352: Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

Apache Camel K CVE-2026-80352 lets CR authors inject arbitrary Kubernetes objects via Master trait serviceAccountName YAML injection.

oss-securitySep 10, 14:08 UTC · Sep 10, 2026Vulnerability 2 sourcesCVE-2026-803523

CVE-2026-80351: Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

Apache Camel K CVE-2026-80351 lets tenant-controlled Maven repository content execute code inside the operator pod; fixed in 2.9.3/2.10.2.

oss-securitySep 10, 14:06 UTC · Sep 10, 2026Vulnerability 2 sourcesCVE-2026-803513 · 1 read

Related CVEs

by mentions

CVE-2026-803529.8
YAML injection in Apache Camel K lets CR authors create objects with operator privileges
published Sep 10, 2026Apache Camel K
CVE-2026-803519.8
Eval injection in Apache Camel K lets tenants run code with operator privileges
published Sep 10, 2026Apache Camel K
CVE-2026-803548.1
Cross-Tenant Secret Exposure via Authorization Bypass in Apache Camel K
published Sep 10, 2026Apache Camel K

Appears with

Apache Software Foundationorganization · 3
Apachevendor · 3

Entities are extracted by the model from each article. First seen Sep 10, 2026, last mentioned Sep 10, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.