org.apache.camel:camel-crypto-pgp vulnerabilities

CVEs whose affected-version data names the org.apache.camel:camel-crypto-pgp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85243Medium· 5.9PoC

1w ago

Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal() verified the modification detection code…

▾ TwilightApache Software Foundation · org.apache.camel:camel-crypto-pgpEPSS 0.18%via CVEORG