Camel-XPath

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 27, 2026
Last mentioned4d ago

Timeline

1 articles · newest first

Apache Camel patches XXE, deserialization, and credential flaws

Saxon needs 4.18.5, 4.22.2, or 4.23.0; stopping at the XPath and Smooks fix 4.22.1 misses it.

Cyber Security NewsOct 27, 02:50 UTC · 4d agoVulnerabilityCVE-2026-90885 CVE-2026-85250 CVE-2026-88901+31

Related CVEs

by mentions

CVE-2026-88900<1%8.8
Unsafe Java deserialization RCE in Apache Camel JGroups
published 11d agoApache Camel (Camel-JGroups)PoC
CVE-2026-781658.8
Untrusted Java deserialization in Apache Camel Spring Redis
published 11d agoApache Camel
CVE-2026-889018.2
XXE in Apache Camel Smooks default XML reader
published 11d agoApache Camel
CVE-2026-852507.5
XXE in Apache Camel XPath when documentType is InputSource
published 11d agoApache Camel
CVE-2026-852517.5
Credential leak on redirect in Apache Camel HTTP
published 11d agoApache Camel HTTP component
CVE-2026-90885<1%7.5
XXE in Apache Camel Saxon when body is already a Source
published 4d agoApache Camel (camel-saxon)PoC

Appears with

Camel-Spring-Redisproduct · 1
Camel-HTTPproduct · 1
Apachevendor · 1
Camel-JGroupsproduct · 1
Camel-Smooksproduct · 1
Camel-FOPproduct · 1
Camel-Saxonproduct · 1
Apache Camelproduct · 1

Entities are extracted by the model from each article. First seen Oct 27, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.