org.apache.camel:camel-mina-sftp vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-mina-sftp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-79984High· 7.4PoC

today

Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remo…

▾ MidnightApache Software Foundation · org.apache.camel:camel-mina-sftpvia CVEORG