MavenPackage

org.apache.camel:camel-knative

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Version timeline

CVE-2026-85247
Affects 4.0.0 to 4.18.4 (4.18.5 is outside it); 4.19.0 to 4.22.0 (4.22.1 is outside it)
CVE-2026-84180
Affects 4.0.0 to 4.18.4 (4.18.5 is outside it); 4.19.0 to 4.22.0 (4.22.1 is outside it)
CVE-2026-63621
Affects 3.15.0 to 4.14.8 (4.14.9 is outside it); 4.15.0 to 4.18.3 (4.18.4 is outside it); 4.19.0 to 4.21.0 (4.22.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2026-85247Medium 5.9
Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore
Affected: from 4.0.0, fixed in 4.18.5; from 4.19.0, fixed in 4.22.1.
Fixed in 4.18.5 (released Oct 6, 2026, 13 days before disclosure) and 4.22.1 (released Sep 13, 2026, 36 days before disclosure).
The latest release, 4.23.0, is not affected.
CVE-2026-84180Medium 5.3
Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions
Affected: from 4.0.0, fixed in 4.18.5; from 4.19.0, fixed in 4.22.1.
Fixed in 4.18.5 (released Oct 6, 2026, 13 days before disclosure) and 4.22.1 (released Sep 13, 2026, 36 days before disclosure).
The latest release, 4.23.0, is not affected.
CVE-2026-63621Medium 5.3
Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without…
Affected: from 3.15.0, fixed in 4.14.9; from 4.15.0, fixed in 4.18.4; from 4.19.0, fixed in 4.21.0; from 3.15.0, fixed in 4.14.9; from 4.15.0, fixed in 4.18.4; from 4.19.0, fixed in 4.22.0.
Fixed in 4.14.9 (released Aug 9, 2026, 15 days before disclosure), 4.18.4 (released Aug 10, 2026, 14 days before disclosure) and 4.22.0 (released Aug 7, 2026, 17 days before disclosure).
The latest release, 4.23.0, is not affected.