org.apache.camel:camel-spring-redis vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-spring-redis package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78165High· 8.8PoC

today

Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare Jdk…

▾ MidnightApache Software Foundation · org.apache.camel:camel-spring-redisvia CVEORG