org.apache.camel:camel-netty-http vulnerabilities (Maven)

3 vulnerabilities.

• org.apache.camel:camel-netty-http Maven Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal… CVE-2026-49365 Public exploitFix available 5.3 MediumJuly 6, 2026
• org.apache.camel:camel-netty-http Maven Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure CVE-2026-42527 Public exploitFix available 8.1 HighJuly 6, 2026
• org.apache.camel:camel-netty-http Maven Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled CVE-2026-40859 Public exploitFix available 8.1 HighJuly 6, 2026