org.apache.camel:camel-thrift vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-thrift package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85245Medium· 5.9

today

Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target

Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Thrift data format unmarshalled incoming data into th…

▾ SunlitApache Software Foundation · org.apache.camel:camel-thriftvia CVEORG