org.apache.camel:camel-jms vulnerabilities (Maven)

4 vulnerabilities.

• org.apache.camel:camel-jms Maven Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder CVE-2026-43866 Public exploitFix available 7.3 HighJuly 6, 2026
• org.apache.camel:camel-jms Maven Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure CVE-2026-42527 Public exploitFix available 8.1 HighJuly 6, 2026
• org.apache.camel:camel-jms Maven Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows ca… CVE-2026-40453 Public exploitFix available 9.9 CriticalApril 27, 2026
• org.apache.camel:camel-jms Maven Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp CVE-2026-40860 Public exploitFix available 9.8 CriticalApril 27, 2026