Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Log in Start free

Home
Vendors
Apache
Camel

Apache Software Foundation camel Vulnerabilities: CVEs, CISA KEV & Security Advisories

Apache Software Foundation

75 CVEs

Apache Software Foundation camel Vulnerabilities

CVE security advisories and vulnerability history for camel by Apache Software Foundation.

75

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

16

Public exploits

PoC or exploit code

7.9

Avg CVSS

2013–2026

Last updated July 6, 2026

Overview

Apache Software Foundation camel has 75 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 16 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation camel, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Apache Software Foundation camel's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical29

High27

Medium17

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Apache Software Foundation camel's CVEs are currently listed in CISA's KEV catalog.

Public exploits

16

16 of Apache Software Foundation camel's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation camel version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

Version ranges

4.19.0 <= v < 4.21.031 CVEs
4.15.0 <= v < 4.18.328 CVEs
4.0.0 <= v < 4.14.822 CVEs
4.19.0 <= v <= 4.19.07 CVEs
4.15.0 <= v < 4.18.26 CVEs
<= 13.4.0.05 CVEs
<= 12.0.04 CVEs
<= 12.1.04 CVEs
<= 13.3.0.04 CVEs
2.10.0 <= v <= 2.10.04 CVEs
2.10.1 <= v <= 2.10.14 CVEs
2.10.2 <= v <= 2.10.24 CVEs
2.10.3 <= v <= 2.10.34 CVEs

Fixed in

4.18.334 CVEs
ee3bff8b44b38deff7b4f1b665691954e08b2ccd34 CVEs
1d22f8df5d2dab2c309243879373230f4b24487d31 CVEs
4.21.031 CVEs
1451d25df0fbfc7020514dc30f8ec9a59f759ae927 CVEs
4.14.827 CVEs
2326a42c5595aa1eee21caafeee75f8e7f0261ea7 CVEs
4.18.27 CVEs
4.14.66 CVEs
699d9363ab93c54a255afdf97077ee35c3709cd26 CVEs
3.21.43 CVEs
344cacf9ea0afec8639e901868202767d2b66ce33 CVEs

Find a version

75 CVEs

Sort

Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVE-2026-46588
Patch
CWE-20
High · CVSS 7.3
EPSS 0.5% (41th pct)2026-07-06
Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
CVE-2026-46587
Patch
CWE-20
High · CVSS 7.3
EPSS 0.5% (41th pct)2026-07-06
Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
CVE-2026-49042
Patch
CWE-20
High · CVSS 7.3
EPSS 0.5% (41th pct)2026-07-06
Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder
CVE-2026-43866
Public exploit
Patch
CWE-502
High · CVSS 7.3
EPSS 0.6% (46th pct)2026-07-06
Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter
CVE-2026-43867
Public exploit
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.9% (56th pct)2026-07-06
Apache Camel AWS2 SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components
CVE-2026-56140
Patch
CWE-20
Critical · CVSS 9.8
EPSS 0.4% (35th pct)2026-07-06
Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients
CVE-2026-56139
Patch
CWE-209
Medium · CVSS 5.3
EPSS 0.5% (42th pct)2026-07-06
Apache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling control over internal behaviour
CVE-2026-55994
Patch
CWE-20
High · CVSS 7.5
EPSS 0.6% (46th pct)2026-07-06
Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour
CVE-2026-55993
Patch
CWE-20
High · CVSS 7.5
EPSS 0.8% (52th pct)2026-07-06
Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is accepted
CVE-2026-53913
Patch
CWE-287
Critical · CVSS 9.8
EPSS 0.7% (51th pct)2026-07-06
Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients
CVE-2026-49365
Patch
CWE-209
Medium · CVSS 5.3
EPSS 0.5% (40th pct)2026-07-06
Apache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour
CVE-2026-49099
Patch
CWE-74
Medium · CVSS 5.3
EPSS 0.3% (27th pct)2026-07-06
Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic
CVE-2026-49098
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.5% (42th pct)2026-07-06
Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users
CVE-2026-49097
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (43th pct)2026-07-06
Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour
CVE-2026-49086
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.4% (35th pct)2026-07-06
Apache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials
CVE-2026-48206
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.3% (28th pct)2026-07-06
Apache Camel DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour
CVE-2026-48205
Patch
CWE-20
Critical · CVSS 9.1
EPSS 0.4% (30th pct)2026-07-06
Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration
CVE-2026-48204
Patch
CWE-20
Critical · CVSS 9.8
EPSS 0.5% (37th pct)2026-07-06
Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields
CVE-2026-48203
Patch
CWE-74
Critical · CVSS 9.1
EPSS 0.4% (30th pct)2026-07-06
Apache Camel Vertx Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers
CVE-2026-46726
Patch
CWE-20
High · CVSS 7.5
EPSS 0.8% (52th pct)2026-07-06
Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation
CVE-2026-46592
Patch
CWE-20
High · CVSS 7.5
EPSS 0.4% (32th pct)2026-07-06
Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)
CVE-2026-46591
Patch
CWE-943
High · CVSS 8.2
EPSS 0.3% (25th pct)2026-07-06
Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)
CVE-2026-46590
Patch
CWE-502
High · CVSS 8.8
EPSS 0.7% (50th pct)2026-07-06
Apache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query
CVE-2026-46585
Patch
CWE-20
High · CVSS 7.5
EPSS 0.4% (33th pct)2026-07-06
Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters
CVE-2026-46584
Public exploit
Patch
CWE-20
Low · CVSS 3.7
EPSS 0.4% (32th pct)2026-07-06
Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers
CVE-2026-46457
Public exploit
Patch
CWE-20
High · CVSS 7.5
EPSS 0.4% (35th pct)2026-07-06
Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers
CVE-2026-46456
Patch
CWE-20
Critical · CVSS 9.8
EPSS 0.6% (47th pct)2026-07-06
Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted
CVE-2026-46455
Public exploit
Patch
CWE-613
Critical · CVSS 9.8
EPSS 0.4% (35th pct)2026-07-06
Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers
CVE-2026-46454
Patch
CWE-20
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2026-07-06
Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation
CVE-2026-46453
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.6% (44th pct)2026-07-06

Showing 30 of 75

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation camel CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation20 CVEs
CWE-502Deserialization of Untrusted Data15 CVEs
CWE-178Improper Handling of Case Sensitivity3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information2 CVEs
CWE-164Improper Neutralization of Internal Special Elements2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVE
CWE-287Improper Authentication1 CVE

Disclosure activity by year

How many Apache Software Foundation camel CVEs were published each year.

2013

1

2014

2

2015

2

2016

2

2017

5

2018

2

2019

2

2020

5

2023

1

2024

3

2025

3

2026

47

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server351 CVEs tomcat265 CVEs airflow183 CVEs Apache Airflow136 CVEs apache-airflow127 CVEs Apache HTTP Server125 CVEs httpd125 CVEs org.apache.tomcat:tomcat118 CVEs

All Apache Software Foundation vulnerabilities

Frequently asked questions

Common questions about Apache Software Foundation camel vulnerabilities.

How many CVEs does Apache Software Foundation camel have?: Apache Software Foundation camel has 75 published CVE records since 2013.
How many Apache Software Foundation camel CVEs are in CISA KEV?: None of Apache Software Foundation camel's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Apache Software Foundation camel vulnerabilities?: Yes — 16 of Apache Software Foundation camel's CVEs have a known public exploit.
Which versions of Apache Software Foundation camel are affected?: 274 distinct Apache Software Foundation camel versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation camel CVEs?: Apache Software Foundation camel's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-502 (Deserialization of Untrusted Data), CWE-178 (Improper Handling of Case Sensitivity), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).
How many critical Apache Software Foundation camel vulnerabilities are there?: Apache Software Foundation camel has 29 critical and 27 high-severity CVEs.
What is the average severity of Apache Software Foundation camel CVEs?: The average CVSS base score across Apache Software Foundation camel's scored CVEs is 7.9.

References

All Apache Software Foundation vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation camel vulnerabilities

Monitor new Apache Software Foundation camel vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

2.10.4 <= v <= 2.10.4

4 CVEs

2.10.5 <= v <= 2.10.54 CVEs

2.10.6 <= v <= 2.10.64 CVEs

2.11.0 <= v <= 2.11.04 CVEs

2.11.1 <= v <= 2.11.14 CVEs

2.12.0 <= v <= 2.12.04 CVEs

3.0.0 <= v < 4.14.64 CVEs

4.18.0 <= v < 4.18.34 CVEs

1.0.0 <= v <= 1.0.03 CVEs

1.1.0 <= v <= 1.1.03 CVEs

1.2.0 <= v <= 1.2.03 CVEs

1.3.0 <= v <= 1.3.03 CVEs

1.4.0 <= v <= 1.4.03 CVEs

1.5.0 <= v <= 1.5.03 CVEs

1.6.0 <= v <= 1.6.03 CVEs

1.6.1 <= v <= 1.6.13 CVEs

1.6.2 <= v <= 1.6.23 CVEs

1.6.3 <= v <= 1.6.33 CVEs

1.6.4 <= v <= 1.6.43 CVEs

2.0.0 <= v <= 2.0.03 CVEs

2.1.0 <= v <= 2.1.03 CVEs

2.10.7 <= v <= 2.10.73 CVEs

2.11.2 <= v <= 2.11.23 CVEs

2.12.1 <= v <= 2.12.13 CVEs

2.12.2 <= v <= 2.12.23 CVEs

2.14.0 <= v <= 2.14.03 CVEs

2.14.1 <= v <= 2.14.13 CVEs

2.16.0 <= v <= 2.16.03 CVEs

3.0.0 <= v < 3.21.43 CVEs

3.22.0 <= v <= 3.22.03 CVEs

4.0.0 <= v < 4.0.43 CVEs

4.1.0 <= v < 4.4.03 CVEs

<= 2.11.32 CVEs

<= 2.13.32 CVEs

2.0.0 <= v < 2.19.42 CVEs

2.17.0 <= v <= 2.17.02 CVEs

2.17.1 <= v <= 2.17.12 CVEs

2.17.2 <= v <= 2.17.22 CVEs

2.17.3 <= v <= 2.17.32 CVEs

2.17.4 <= v <= 2.17.42 CVEs

2.18.0 <= v <= 2.18.02 CVEs

2.18.1 <= v <= 2.18.12 CVEs

2.20.0 <= v <= 2.20.32 CVEs

2.22.0 <= v <= 2.25.02 CVEs

2.6.0 <= v <= 2.6.02 CVEs

2.7.0 <= v <= 2.7.02 CVEs

2.7.1 <= v <= 2.7.12 CVEs

2.7.2 <= v <= 2.7.22 CVEs

2.7.3 <= v <= 2.7.32 CVEs

2.7.4 <= v <= 2.7.42 CVEs

2.7.5 <= v <= 2.7.52 CVEs

2.8.0 <= v <= 2.8.02 CVEs

2.8.1 <= v <= 2.8.12 CVEs

2.8.2 <= v <= 2.8.22 CVEs

2.8.3 <= v <= 2.8.32 CVEs

2.8.4 <= v <= 2.8.42 CVEs

2.8.5 <= v <= 2.8.52 CVEs

2.8.6 <= v <= 2.8.62 CVEs

2.9.0 <= v <= 2.9.02 CVEs

2.9.1 <= v <= 2.9.12 CVEs

2.9.2 <= v <= 2.9.22 CVEs

2.9.3 <= v <= 2.9.32 CVEs

2.9.4 <= v <= 2.9.42 CVEs

2.9.5 <= v <= 2.9.52 CVEs

3.0.0 <= v <= 3.1.02 CVEs

3.10.0 <= v < 3.22.42 CVEs

3.22.0 <= v < 3.22.12 CVEs

4.10.0 <= v < 4.10.22 CVEs

4.15.0 <= v < 4.18.02 CVEs

4.15.0 <= v < 4.18.12 CVEs

4.8.0 <= v < 4.8.52 CVEs

8.0.0 <= v <= 8.2.22 CVEs

8.0.0 <= v <= 8.5.02 CVEs

< 2.24.01 CVE

<= 11.1.1.7.01 CVE

<= 11.1.1.9.01 CVE

<= 12.1.3.0.01 CVE

<= 2.14.41 CVE

<= 2.15.41 CVE

<= 2.16.01 CVE

<= 2.9.61 CVE

2.0.0 <= v <= 2.19.01 CVE

2.11.3 <= v <= 2.11.31 CVE

2.11.4 <= v <= 2.11.41 CVE

2.12.3 <= v <= 2.12.31 CVE

2.12.4 <= v <= 2.12.41 CVE

2.12.5 <= v <= 2.12.51 CVE

2.13.0 <= v <= 2.13.01 CVE

2.13.1 <= v <= 2.13.11 CVE

2.13.2 <= v <= 2.13.21 CVE

2.13.3 <= v <= 2.13.31 CVE

2.13.4 <= v <= 2.13.41 CVE

2.14.2 <= v <= 2.14.21 CVE

2.14.3 <= v <= 2.14.31 CVE

2.14.4 <= v <= 2.14.41 CVE

2.15.0 <= v <= 2.15.01 CVE

2.15.1 <= v <= 2.15.11 CVE

2.15.2 <= v <= 2.15.21 CVE

2.15.3 <= v <= 2.15.31 CVE

2.15.4 <= v <= 2.15.41 CVE

2.16.1 <= v <= 2.16.11 CVE

2.16.2 <= v <= 2.16.21 CVE

2.16.3 <= v <= 2.16.31 CVE

2.16.4 <= v <= 2.16.41 CVE

2.17.0 <= v <= 2.17.41 CVE

2.17.5 <= v <= 2.17.51 CVE

2.18.0 <= v <= 2.18.11 CVE

2.18.2 <= v <= 2.18.21 CVE

2.2.0 <= v <= 2.2.01 CVE

2.20.0 <= v < 2.20.11 CVE

2.20.0 <= v <= 2.20.01 CVE

2.21.0 <= v <= 2.21.01 CVE

2.21.0 <= v <= 2.21.11 CVE

2.21.0 <= v <= 2.21.31 CVE

2.22.0 <= v <= 2.22.01 CVE

2.22.0 <= v <= 2.22.21 CVE

2.22.0 <= v <= 2.22.51 CVE

2.22.0 <= v <= 3.1.01 CVE

2.23.0 <= v <= 2.23.01 CVE

2.23.0 <= v <= 2.23.41 CVE

2.24.0 <= v <= 2.24.31 CVE

2.25.0 <= v <= 2.25.01 CVE

2.25.1 <= v <= 2.25.11 CVE

2.3.0 <= v <= 2.3.01 CVE

2.4.0 <= v <= 2.4.01 CVE

2.5.0 <= v <= 2.5.01 CVE

2.9.6 <= v <= 2.9.61 CVE

2.9.7 <= v <= 2.9.71 CVE

2.9.8 <= v <= 2.9.81 CVE

3.0.0 <= v < 3.14.91 CVE

3.0.0 <= v < 4.10.91 CVE

3.0.0 <= v < 4.14.71 CVE

3.0.0 <= v < 4.14.81 CVE

3.0.0 <= v <= 3.3.01 CVE

3.18.0 <= v < 3.18.81 CVE

3.18.0 <= v < 4.14.61 CVE

3.20.0 <= v < 3.20.61 CVE

4.0.0 <= v < 4.14.71 CVE

4.0.0 <= v <= 4.0.01 CVE

4.10.0 <= v < 4.10.31 CVE

4.10.0 <= v < 4.10.81 CVE

4.10.0 <= v < 4.14.81 CVE

4.11.0 <= v < 4.14.51 CVE

4.12.0 <= v < 4.14.81 CVE

4.14.0 <= v < 4.14.31 CVE

4.14.0 <= v < 4.14.81 CVE

4.14.0 <= v <= 4.14.51 CVE

4.14.1 <= v < 4.14.61 CVE

4.15.0 <= v < 4.17.01 CVE

4.17.0 <= v < 4.18.31 CVE

4.18.0 <= v < 4.18.21 CVE

4.18.0 <= v <= 4.18.01 CVE

4.20.0 <= v <= 4.20.01 CVE

4.3.0 <= v < 4.14.81 CVE

4.8.0 <= v < 4.18.31 CVE

4.8.0 <= v < 4.8.61 CVE

8.0.0 <= v <= 8.1.01 CVE

8.2.0 <= v <= 8.2.31 CVE

4.0.4

3 CVEs

4.4.03 CVEs

63dc3d2bbfc14abce85fedee71499a45d746d6613 CVEs

aab0e881d960959cce968804cc269fa38dd1aae53 CVEs

2.19.42 CVEs

3.22.12 CVEs

3.22.42 CVEs

4.10.22 CVEs

4.14.72 CVEs

4.18.02 CVEs

4.18.12 CVEs

4.8.52 CVEs

4e2d4a1a011af53ee249ecb59906117c15bc55282 CVEs

63b0ee312c7e42e8a154447d80b939b0e533aa7b2 CVEs

8a56ec5eb26f4ddd033d10690a13cb76cbe699d52 CVEs

8c59a09720f8358ecee4f1727d628fe457081dfc2 CVEs

8f002c031c008470a0703ae9aaba206a96b1dbf92 CVEs

d8b8b58531b4731bc1af9fdd7f73cff1817c7cee2 CVEs

dd22f752e240bd1343af15c775ef02d754f6df382 CVEs

1398cc8e8f58b2bf5c9e9a7f8dffd113ae290d881 CVE

2.20.11 CVE

2.24.01 CVE

3.14.91 CVE

3.18.81 CVE

3.20.61 CVE

4.10.31 CVE

4.10.81 CVE

4.10.91 CVE

4.14.31 CVE

4.14.51 CVE

4.17.01 CVE

4.8.61 CVE

4936ada737a7f905eb63438d1ef22e88a7d2e81f1 CVE

6a9955c07da4cc92988a4c6af8778e5069cdb2551 CVE

764fcb25268cd1f7de0503e504cb0a8064b2ecb11 CVE

7a20d8f4445e66173c78d56c2bdbeeddbb14cbfc1 CVE

7a239b9f57f1db4e91cf8ba601fb6917efd82d391 CVE

82c8215b2c3b5e8807f2df5f495e6f42f17281141 CVE

888f8b47d3f3cd87c1fa6ab364d70af38a24fa261 CVE

bfd8046a853854fbe753939a30aec8b5452bc61d1 CVE

cf4dbbcb1c88dbecaa14f3d74d66490aa71f777f1 CVE

e6675aaf8506e2eb5c05637fb16c5c03aa0922f01 CVE

f8b3a16077cab2e85f58d2e47b5d3355d27c1f8a1 CVE