CVE-2026-78164Published
Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
cve-program · CVE-2026-78164
Publishedorg.apache.camel:camel-http
https://repo.maven.apache.org/maven2
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Apache Software Foundation",
"product": "Apache Camel",
"collectionURL": "https://repo.maven.apache.org/maven2",
"packageName": "org.apache.camel:camel-http",
"packageURL": "pkg:maven/org.apache.camel/camel-http",
"versions": [
{
"status": "affected",
"version": "4.0.0",
"lessThan": "4.18.5",
"versionType": "maven"
},
{
"status": "affected",
"version": "4.19.0",
"lessThan": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}org.apache.camel:camel-http-common
https://repo.maven.apache.org/maven2
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Apache Software Foundation",
"product": "Apache Camel",
"collectionURL": "https://repo.maven.apache.org/maven2",
"packageName": "org.apache.camel:camel-http-common",
"versions": [
{
"status": "affected",
"version": "4.15.0",
"lessThan": "4.18.5",
"versionType": "maven"
},
{
"status": "affected",
"version": "4.19.0",
"lessThan": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}org.apache.camel:camel-vertx-http
https://repo.maven.apache.org/maven2
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Apache Software Foundation",
"product": "Apache Camel",
"collectionURL": "https://repo.maven.apache.org/maven2",
"packageName": "org.apache.camel:camel-vertx-http",
"versions": [
{
"status": "affected",
"version": "4.15.0",
"lessThan": "4.18.5",
"versionType": "maven"
},
{
"status": "affected",
"version": "4.19.0",
"lessThan": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}org.apache.camel:camel-undertow
https://repo.maven.apache.org/maven2
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Apache Software Foundation",
"product": "Apache Camel",
"collectionURL": "https://repo.maven.apache.org/maven2",
"packageName": "org.apache.camel:camel-undertow",
"versions": [
{
"status": "affected",
"version": "4.15.0",
"lessThan": "4.18.5",
"versionType": "maven"
},
{
"status": "affected",
"version": "4.19.0",
"lessThan": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}org.apache.camel:camel-netty-http
https://repo.maven.apache.org/maven2
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Apache Software Foundation",
"product": "Apache Camel",
"collectionURL": "https://repo.maven.apache.org/maven2",
"packageName": "org.apache.camel:camel-netty-http",
"versions": [
{
"status": "affected",
"version": "4.15.0",
"lessThan": "4.18.5",
"versionType": "maven"
},
{
"status": "affected",
"version": "4.19.0",
"lessThan": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}Original source record · Cite this exact observation · Complete original publisher JSON