Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.25.2
purl pkg:maven/org.apache.camel/camel-core@2.25.2
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. … There are no reported fixed by versions.
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2017-3159
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
CVE-2015-0264
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers …
CVE-2019-0194
Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel …