Apache Camel 3.22.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:camel:3.22.0:*:*:*:*:*:*:*
part: a version: 3.22.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Camel (ba45c6b1-1e75-5492-855e-5939ebeac8e2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/camel |
purl2cpe | 2026-06-01 10:14:25.500213 |
pkg:docker/apache/camel |
purl2cpe | 2026-06-01 10:14:25.500214 |
pkg:github/apache/camel |
purl2cpe | 2026-06-01 10:14:25.500216 |
pkg:maven/org.apache.camel/camel |
purl2cpe | 2026-06-01 10:14:25.500218 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23114 |
vulnerable | 2026-06-08 06:29:36.326703 |
Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository
Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.
Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1
Published: 2024-02-20T14:59:38.326Z
Updated: 2024-08-28T19:49:48.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22371 |
vulnerable | 2026-06-08 06:29:34.705555 |
Apache Camel issue on ExchangeCreatedEvent
LOW (2.9)
Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0.
Users are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue.
Published: 2024-02-26T09:22:38.384Z
Updated: 2024-10-31T13:03:53.000Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22369 |
vulnerable | 2026-06-08 06:29:34.697752 |
Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository
Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.
Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1
Published: 2024-02-20T14:58:36.291Z
Updated: 2024-11-05T19:47:09.797Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.