apache_camel_karavan vulnerabilities
CVEs whose affected-version data names the apache_camel_karavan package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-103413High· 8.8Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource…
Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource…
▾ TwilightApache Software Foundation · Apache Camel KaravanEPSS 0.39%via NVD
CVE-2026-103412High· 8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was w…
Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was w…
▾ TwilightApache Software Foundation · Apache Camel KaravanEPSS 0.52%via NVD