Apache Camel (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-05-28. Vendor: Apache.

CVEs of Apache Camel

• CVE-2019-0188 - CVSS 7.5 (high), 2019-05-28: Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library.…
• CVE-2019-0194 - CVSS 7.5 (high), 2019-04-30: Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier)…