org.apache.camel:camel-pqc
Maven3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.apache.camel:camel-pqcpage 1 of 1
- CVE-2026-40048HIGHCVSS 7.8EG 7.8✓ Fixed in 4.18.22026-04-27
vulnerable: 4.12.0 ... 4.18.1 (15 versions)
The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. The cas…
- CVE-2026-43867CRITICALCVSS 9.8EG 9.8✓ Fixed in 4.21.02026-07-06
vulnerable: 4.19.0, 4.20.0
Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecycleManager implementations. AwsSecretsManagerKeyLifecycleMa…
- CVE-2026-46590HIGHCVSS 8.8EG 8.8✓ Fixed in 4.21.02026-07-06
vulnerable: 4.19.0, 4.20.0
Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManag…
Check whether org.apache.camel:camel-pqc is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.camel:camel-pqc CVEs against the assets you own.
Start Free Scan →