Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.24.1
purl pkg:maven/org.apache.camel/camel-core@2.24.1
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. … There are no reported fixed by versions.
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2017-3159
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
CVE-2015-5344
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via …
CVE-2018-8027
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
CVE-2015-0264
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers …
CVE-2019-0194
Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel …