org.apache.camel:camel-jgroups vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-jgroups package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-88900High· 8.8

yesterday

Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution

Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. JGroupsEndpoint.createExchange(Message), which CamelJGro…

▾ TwilightApache Software Foundation · org.apache.camel:camel-jgroupsvia CVEORG