org.apache.camel:camel-hazelcast vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-hazelcast package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78162Critical· 10.0PoC

today

Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)

Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilte…

▾ AbyssalApache Software Foundation · org.apache.camel:camel-hazelcastvia CVEORG