Apache Camel Saxon resolves external entities in bodies (CVE-2026-90885)
camel-saxon before 4.18.5 and before 4.22.2 parses Source bodies with Saxon defaults; CVSS is 7.5.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
camel-saxon before 4.18.5 and before 4.22.2 parses Source bodies with Saxon defaults; CVSS is 7.5.
Today 1.3K readers · 2K views · 1.6K reads · all time 160K views