Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Patched Functions
Apache
Camel

apache/camel: Functions Patched by CVE Fixes

java

#50 of 500 repositories

apache/camel

Functions and files changed by CVE fixes in this repository.

Latest located fix August 24, 2026

73

CVE fixes located

Published CVEs

352

Functions patched

Distinct function sites

183

Files patched

Distinct source files

2013–2026

Years covered

By CVE publication date

Overview

73 published CVEs have a fix traced to functions in apache/camel, the earliest published in 2013. Those fixes changed 352 distinct functions across 183 files, in 1,448 patch hunks.

Among the 500 repositories tracked here, apache/camel ranks #50 by the number of CVEs with a located fix.

Most patched functions

Functions in apache/camel changed by the most CVE fixes.

1getKeyMetadatacomponents/camel-pqc/src/main/java/org/apache/camel/component/pqc/lifecycle/FileBasedKeyLifecycleManager.java3 CVEs · 3 patches2026
2createExchangecomponents/camel-iggy/src/main/java/org/apache/camel/component/iggy/IggyFetchRecords.java3 CVEs · 2 patches2026
3initializecomponents/camel-mail/src/main/java/org/apache/camel/component/mail/MailHeaderFilterStrategy.java3 CVEs · 2 patches2026
4getHeaderFilterStrategycomponents/camel-coap/src/main/java/org/apache/camel/coap/CoAPComponent.java3 CVEs · 2 patches2026
5getHeaderFilterStrategycomponents/camel-coap/src/main/java/org/apache/camel/coap/CoAPEndpoint.java3 CVEs · 2 patches2026
6sendEventNotificationcomponents/camel-atmosphere-websocket/src/main/java/org/apache/camel/component/atmosphere/websocket/WebsocketConsumer.java3 CVEs · 1 patches2026
7getHeaderFilterStrategycomponents/camel-iggy/src/main/java/org/apache/camel/component/iggy/IggyEndpoint.java3 CVEs · 1 patches2026
8populateExchangeHeaderscomponents/camel-vertx/camel-vertx-websocket/src/main/java/org/apache/camel/component/vertx/websocket/VertxWebsocketConsumer.java3 CVEs · 1 patches2026
9getHeaderFilterStrategycomponents/camel-vertx/camel-vertx-websocket/src/main/java/org/apache/camel/component/vertx/websocket/VertxWebsocketEndpoint.java3 CVEs · 1 patches2026
10handleRequestcomponents/camel-coap/src/main/java/org/apache/camel/coap/CamelCoapResource.java3 CVEs · 1 patches2026
11extractBodyFromJmscomponents/camel-sjms/src/main/java/org/apache/camel/component/sjms/jms/JmsBinding.java2 CVEs · 4 patches2026
12createBindingcomponents/camel-sjms/src/main/java/org/apache/camel/component/sjms/SjmsEndpoint.java2 CVEs · 4 patches2026
13JmsBindingcomponents/camel-sjms/src/main/java/org/apache/camel/component/sjms/jms/JmsBinding.java2 CVEs · 4 patches2026
14getDeserializationFiltercomponents/camel-jms/src/main/java/org/apache/camel/component/jms/JmsConfiguration.java2 CVEs · 4 patches2026
15configureAuthenticationcomponents/camel-platform-http-main/src/main/java/org/apache/camel/component/platform/http/main/authentication/JWTAuthenticationConfigurer.java2 CVEs · 3 patches2026

Most patched files

Files in apache/camel changed by the most CVE fixes.

1components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java5 CVEs · 3 functions
2components/camel-coap/src/main/java/org/apache/camel/coap/CoAPHeaderFilterStrategy.java4 CVEs · 1 functions
3components/camel-pqc/src/main/java/org/apache/camel/component/pqc/lifecycle/FileBasedKeyLifecycleManager.java3 CVEs · 9 functions
4components/camel-jms/src/main/java/org/apache/camel/component/jms/JmsBinding.java3 CVEs · 6 functions
5components/camel-sjms/src/main/java/org/apache/camel/component/sjms/jms/JmsBinding.java3 CVEs · 5 functions
6components/camel-sjms/src/main/java/org/apache/camel/component/sjms/SjmsEndpoint.java3 CVEs · 4 functions
7components/camel-jms/src/main/java/org/apache/camel/component/jms/JmsConfiguration.java3 CVEs · 3 functions
8components/camel-coap/src/main/java/org/apache/camel/coap/CoAPComponent.java3 CVEs · 2 functions
9components/camel-coap/src/main/java/org/apache/camel/coap/CoAPEndpoint.java3 CVEs · 2 functions
10components/camel-iggy/src/main/java/org/apache/camel/component/iggy/IggyEndpoint.java3 CVEs · 2 functions

Fix size

How much code a CVE fix in apache/camel changes, with backports counted once.

66

Median lines changed

Added plus removed, per CVE

25%

Fixes of 20 lines or fewer

Share of CVE fixes

14%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in apache/camel, and the functions each fix changed.

Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
CVE-2026-78329UndertowEndpoint
Critical · CVSS 9.8
EPSS 0.7%2026-08-24
Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection
CVE-2026-71300WebsocketConstants ImportantHeaderUtils
Critical · CVSS 9.8
EPSS 0.7%2026-08-24
Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy
CVE-2026-63621decodeStructuredContent mapExtensionAsHeader createHeaderFilterStrategy
Medium · CVSS 5.3
EPSS 0.6%2026-08-24
Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted
CVE-2026-66908put getJwtIssuer withJwtIssuer
High · CVSS 7.5
EPSS 0.6%2026-08-24
Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result
CVE-2026-66907GoogleCloudStorageFileNameHelper evaluateFileExpression
High · CVSS 7.5
EPSS 0.8%2026-08-24
Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir
CVE-2026-66906resolveWithinDirectory AzureFileNameHelper downloadBlobToFile
Critical · CVSS 9.1
EPSS 0.8%2026-08-24
Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
CVE-2026-60093resolveWithinDirectory AzureFileNameHelper downloadBlobToFile
Medium · CVSS 5.5
EPSS 0.2%2026-08-24
Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled
CVE-2026-59230createInboundHeaderFilterStrategy getExchange MimeMultipartDataFormat
Medium · CVSS 6.5
EPSS 0.7%2026-08-24
Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVE-2026-46588CouchDbConstants
High · CVSS 7.3
EPSS 0.7%2026-07-06
Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVE-2026-46587CouchbaseConstants
High · CVSS 7.3
EPSS 0.7%2026-07-06
Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
CVE-2026-49042forEachRemaining createConsumer invokeTools
High · CVSS 7.3
EPSS 0.7%2026-07-06
Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder
CVE-2026-43866isObjectMessageEnabled JmsBinding createJmsMessage
High · CVSS 7.3
EPSS 0.7%2026-07-06

Get an alert for each new apache/camel CVE, with the patched functions and AI-written analysis.

Monitor camel CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

bcgit/bc-java73 CVEs php/php-src73 CVEs wordpress/core73 CVEs FasterXML/jackson-databind72 CVEs ImageMagick/ImageMagick671 CVEs open-webui/open-webui71 CVEs symfony/symfony76 CVEs TYPO3/typo376 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in apache/camel.

How many CVEs have a located fix in apache/camel?: 73 published CVEs have a fix traced to functions in apache/camel, touching 352 functions across 183 files.
Which function in apache/camel has been patched by the most CVEs?: getKeyMetadata in components/camel-pqc/src/main/java/org/apache/camel/component/pqc/lifecycle/FileBasedKeyLifecycleManager.java has been changed by 3 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in apache/camel?: The median fix changes 66 lines. 25% of fixes change 20 lines or fewer, and 14% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

apache/camel on GitHub (opens in a new tab)
Patched functions directory
CWE directory: the weakness types behind these fixes

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track apache/camel CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing

On this page

Overview
Most patched functions
Most patched files
Fix size
Latest CVEs
Other repositories
FAQ
References