org.apache.camel:camel-a2a vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-a2a package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-71569Medium· 4.8PoC

4d ago

Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name

Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not …

▾ TwilightApache Software Foundation · org.apache.camel:camel-a2aEPSS 0.35%via CVEORG