camel-docling

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 23, 2026
Last mentioned7d ago

Timeline

2 articles · newest first

Camel Docling output path header allows arbitrary writes (CVE-2026-95629)

A low-privileged caller can steer conversion output to an arbitrary directory through an unvalidated header.

oss-securityOct 23, 13:20 UTC · 7d agoVulnerability 4 sourcesCVE-2026-956291

Camel Docling still accepts absolute CLI paths (CVE-2026-95628)

Path checks added after CVE-2026-40047 do not reject absolute paths supplied as custom CLI arguments.

oss-securityOct 23, 13:18 UTC · 7d agoVulnerability 4 sourcesCVE-2026-956282

Related CVEs

by mentions

CVE-2026-956295.4
Path Traversal in Apache Camel Docling before 4.18.5 and 4.22.2
published 4d agoApache Camel
CVE-2026-956285.4
Path Traversal in Apache Camel Docling before 4.23.0
published 4d agoApache Camel

Appears with

Apachevendor · 2
Apache Camelproduct · 2

Entities are extracted by the model from each article. First seen Oct 23, 2026, last mentioned 7d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.