Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.20.4
purl pkg:maven/org.apache.camel/camel-core@2.20.4
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel …
2.21.5
Vulnerable
2.22.4
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
2.25.2
Vulnerable
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
GHSA-h896-mx9x-g32g
Aliases:
CVE-2019-0188
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability …
2.24.0
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2018-8027
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
GHSA-8vfm-4388-6rpc
Apache is vulnerable to XXE in XSD validation processor Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to … CVE-2018-8027
CVE-2018-8041
Path Traversal Apache Camel Mail is vulnerable to path traversal.