org.apache.camel:camel-as2 vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-as2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-80344High· 8.2PoC

today

Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address

Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Mess…

▾ MidnightApache Software Foundation · org.apache.camel:camel-as2via CVEORG

CVE-2026-85296Medium· 6.5

today

Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State

Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Signing material belonging to an individual request was stored…

▾ SunlitApache Software Foundation · org.apache.camel:camel-as2via CVEORG