PT-2026-35384 · Apache+1 · Apache Camel+2

Hyunwoo Kim · Publicado 2026-04-27 · Atualizado 2026-04-28 · CVE-2026-33454

X.com · Cvenew

CVSS v3.1

9.4

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CVE-2026-33454 The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filt… https://t.co/aFcj2mALO4

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2026-33454

GHSA-2VQF-X7G4-7C2G

Produtos afetados

Apache Camel

Camel

Org.Apache.Camel:Camel-Mail

Referências · 21

• https://github.com/apache/camel · Nota
• https://github.com/apache/camel/commit/05cffa5ec05ff2ec3c50a77825625da6e426e7a8 · Nota
• https://github.com/apache/camel/pull/22151 · Nota
• https://github.com/apache/camel/commit/540d48e1cb5e492bd1c74bfc5a6e929fcf24fe3b · Nota
• https://github.com/apache/camel/pull/22148 · Nota
• https://github.com/apache/camel/pull/22146 · Nota
• https://github.com/apache/camel/pull/22150 · Nota
• https://github.com/apache/camel/pull/22147 · Nota
• https://github.com/apache/camel/pull/22149 · Nota
• https://github.com/apache/camel/commit/5c20de8f047de725e0b32a874cdb5108c3e46558 · Nota
• https://github.com/apache/camel/commit/0307dd4709a8136eba3206701004bcb528bc47fd · Nota
• https://github.com/apache/camel/commit/3926ab2b7745e36da2cd8e0dc019018bc415aff9 · Nota
• https://github.com/apache/camel/commit/e074c01a719cccf3b1c2efbd2ff31e60fd6220ce · Nota
• https://github.com/apache/camel/pull/22152 · Nota
• https://camel.apache.org/security/CVE-2026-33454.html · Aviso do Fabricante