Apache Camel K (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-10. Vendor: Apache Software Foundation.

CVEs of Apache Camel K

• CVE-2026-80354 - CVSS 8.1 (high), 2026-09-10: Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant…
• CVE-2026-80351 - CVSS 9.8 (critical), 2026-09-10: Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K. An improper neutralization of…
• CVE-2026-80352 - CVSS 9.8 (critical), 2026-09-10: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration…
• CVE-2026-45760 - CVSS 8.1 (high), 2026-05-21: (Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K.…