Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.camel/camel-leveldb@4.10.9
Typemaven
Namespaceorg.apache.camel
Namecamel-leveldb
Version4.10.9
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.14.5
Latest_non_vulnerable_version4.18.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-r7xv-1mfj-zqg1
vulnerability_id VCID-r7xv-1mfj-zqg1
summary 
Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component.

The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. An attacker who can write to the LevelDB database files used by a Camel application can inject a crafted serialized Java object that, when deserialized during normal aggregation repository operations, results in arbitrary code execution in the context of the application.
This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.5, from 4.15.0 before 4.18.0.

Users are recommended to upgrade to version 4.18.0, which fixes the issue. For the 4.10.x LTS releases, users are recommended to upgrade to 4.10.9, while for 4.14.x LTS releases, users are recommended to upgrade to 4.14.5
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25747.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25747.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-25747
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20031
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-25747
2
reference_url https://github.com/apache/camel
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel
3
reference_url https://github.com/apache/camel/commit/0e3ac39e20416c91af6df2cfce3f7d795e75ad89
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/0e3ac39e20416c91af6df2cfce3f7d795e75ad89
4
reference_url https://github.com/apache/camel/commit/5f343367f7b25646b7d12be26c3e87381c7a7ecb
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/5f343367f7b25646b7d12be26c3e87381c7a7ecb
5
reference_url https://github.com/apache/camel/commit/af2f2e9571b3b03a36b771bd9eb10427886d9636
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/af2f2e9571b3b03a36b771bd9eb10427886d9636
6
reference_url https://issues.apache.org/jira/browse/CAMEL-22966
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/CAMEL-22966
7
reference_url http://www.openwall.com/lists/oss-security/2026/02/18/6
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2026/02/18/6
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2441910
reference_id 2441910
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2441910
9
reference_url https://github.com/oscerd/CVE-2026-25747
reference_id CVE-2026-25747
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:31Z/
url https://github.com/oscerd/CVE-2026-25747
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-25747
reference_id CVE-2026-25747
reference_type
scores
0
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-25747
11
reference_url https://camel.apache.org/security/CVE-2026-25747.html
reference_id CVE-2026-25747.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:31Z/
url https://camel.apache.org/security/CVE-2026-25747.html
12
reference_url https://github.com/advisories/GHSA-429q-mrc4-38fr
reference_id GHSA-429q-mrc4-38fr
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-429q-mrc4-38fr
fixed_packages
0
url pkg:maven/org.apache.camel/camel-leveldb@4.10.9
purl pkg:maven/org.apache.camel/camel-leveldb@4.10.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-leveldb@4.10.9
1
url pkg:maven/org.apache.camel/camel-leveldb@4.14.5
purl pkg:maven/org.apache.camel/camel-leveldb@4.14.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-leveldb@4.14.5
2
url pkg:maven/org.apache.camel/camel-leveldb@4.18.0
purl pkg:maven/org.apache.camel/camel-leveldb@4.18.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-leveldb@4.18.0
aliases CVE-2026-25747, GHSA-429q-mrc4-38fr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r7xv-1mfj-zqg1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-leveldb@4.10.9