org.apache.camel:camel-platform-http vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-platform-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-85254Medium· 6.5

today

Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected…

▾ SunlitApache Software Foundation · org.apache.camel:camel-platform-httpvia CVEORG

CVE-2026-85316Medium· 4.8

today

Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching

Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The component decided whether an endpoint ran in pr…

▾ SunlitApache Software Foundation · org.apache.camel:camel-platform-httpvia CVEORG