org.apache.camel:camel-jetty vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-jetty package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85313Medium· 4.3

today

Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Setting enableCORS on a Jetty endpoint installed…

▾ SunlitApache Software Foundation · org.apache.camel:camel-jettyvia CVEORG