org.apache.camel:camel-mail vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-mail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85314Medium· 6.5

today

Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)

Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addressed mail headers reaching the Exchange without passing t…

▾ SunlitApache Software Foundation · org.apache.camel:camel-mailvia CVEORG