org.apache.camel:camel-aws2-s3 vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-aws2-s3 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-95664Medium· 5.4

today

Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache Camel AWS2-s3 component. This issue affects Apache Camel: from 4.8.0 before 4.18.5, from 4.…

▾ SunlitApache Software Foundation · org.apache.camel:camel-aws2-s3via CVEORG