CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112108ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflowztxz16 fastllm
- CVE-2026-88900Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code ExecutionApache Software Foundation org.apache.camel:camel-jgroups
- CVE-2026-112107ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflowztxz16 fastllm
- CVE-2026-91858FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECURE_PROCESSING…Apache Software Foundation Apache Camel
- CVE-2026-112106TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validationTufayelLUS TikTok-Video-Downloader-PHP
- CVE-2026-88901Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by defaultApache Software Foundation Apache Camel
- CVE-2026-85317Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token CacheApache Software Foundation org.apache.camel:camel-http
- CVE-2026-85316Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path MatchingApache Software Foundation org.apache.camel:camel-platform-…
- CVE-2026-85315Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer ExceptionsApache Software Foundation org.apache.camel:camel-grpc
- CVE-2026-85314Improper Input Validation vulnerability in Apache Camel Mail componentApache Software Foundation org.apache.camel:camel-mail
- CVE-2026-85313Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is SetApache Software Foundation org.apache.camel:camel-jetty
- CVE-2026-85312Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action HeaderApache Software Foundation org.apache.camel:camel-core
- CVE-2026-85300Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File PermissionsApache Software Foundation Apache Camel
- CVE-2026-85301Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss ClaimApache Software Foundation Apache Camel
- CVE-2026-85296Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request StateApache Software Foundation org.apache.camel:camel-as2
- CVE-2026-85260Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by DefaultApache Software Foundation org.apache.camel:camel-mllp
- CVE-2026-85257Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer ExceptionsApache Software Foundation org.apache.camel:camel-cxf
- CVE-2026-85254Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name CasingApache Software Foundation org.apache.camel:camel-platform-…
- CVE-2026-71253Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSONApache Software Foundation Apache Johnzon
- CVE-2026-85251Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect TargetsApache Software Foundation org.apache.camel:camel-http
- CVE-2026-85250Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource OptionApache Software Foundation org.apache.camel:camel-xpath
- CVE-2026-85249Apache Camel: Camel-Tika Header Injection via Unfiltered Document MetadataApache Software Foundation org.apache.camel:camel-tika
- CVE-2026-85248Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature InstanceApache Software Foundation Apache Camel
- CVE-2026-85247Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a TruststoreApache Software Foundation org.apache.camel:camel-knative
- CVE-2026-85246Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer ExceptionsApache Software Foundation org.apache.camel:camel-mina
- CVE-2026-85245Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization TargetApache Software Foundation org.apache.camel:camel-thrift
- CVE-2026-85243Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message StructureApache Software Foundation org.apache.camel:camel-crypto-pgp
- CVE-2026-84181Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject ReuseApache Software Foundation org.apache.camel:camel-shiro
- CVE-2026-84180Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer ExceptionsApache Software Foundation org.apache.camel:camel-knative
- CVE-2026-84178Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code FlowApache Software Foundation Apache Camel