org.apache.camel:camel-netty-http vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-netty-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-80343High· 8.2PoC

today

Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the r…

▾ MidnightApache Software Foundation · org.apache.camel:camel-netty-httpvia CVEORG

CVE-2026-78164High· 8.2PoC

today

Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers

Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components. This issue affec…

▾ MidnightApache Software Foundation · org.apache.camel:camel-httpvia CVEORG