org.apache.camel:camel-oauth vulnerabilities
CVEs whose affected-version data names the org.apache.camel:camel-oauth package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-80312High· 8.2PoCApache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors
Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-oauth processors that guard a route did not stop the exchange w…
▾ MidnightApache Software Foundation · org.apache.camel:camel-oauthvia CVEORG
CVE-2026-84178Medium· 6.1Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow
Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The authorization code callback did not carry a state parameter b…
▾ SunlitApache Software Foundation · org.apache.camel:camel-oauthvia CVEORG