org.apache.camel:camel-pqc vulnerabilities (Maven)

3 vulnerabilities.

• org.apache.camel:camel-pqc Maven Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter CVE-2026-43867 Public exploitFix available 9.8 CriticalJuly 6, 2026
• org.apache.camel:camel-pqc Maven Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remed… CVE-2026-46590 Public exploitFix available 8.8 HighJuly 6, 2026
• org.apache.camel:camel-pqc Maven Apache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager CVE-2026-40048 Public exploitFix available 7.8 HighApril 27, 2026