org.apache.camel:camel-http vulnerabilities
CVEs whose affected-version data names the org.apache.camel:camel-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-85251High· 7.5PoCApache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect t…
▾ MidnightApache Software Foundation · org.apache.camel:camel-httpEPSS 0.50%via CVEORG
CVE-2026-85317Medium· 4.8PoCApache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache
Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The OAuth2 client token cache is global to the JVM, and i…
▾ TwilightApache Software Foundation · org.apache.camel:camel-httpEPSS 0.27%via CVEORG