Skip to contentApache Software Foundation Camel K vulnerabilities
- apache software foundation camel karavanApache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yamlCVE-2026-1034138.8 High
- apache software foundation camel karavanApache Camel Karavan: project file name path traversal when committing a project to GitCVE-2026-1034128.8 High
- apache camel, apache software foundation camel k +1 moreApache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespaceCVE-2026-803548.1 High
- apache camel, apache software foundation camel k +1 moreApache Camel K: Camel K Tenant repositories reach Maven execution inside operator podCVE-2026-803519.8 Critical
- apache camel, apache software foundation camel k +1 moreApache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objectsCVE-2026-803529.8 Critical
- apache camel, apache software foundation camel keycloak +1 moreApache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null…CVE-2026-53913Public exploitFix available9.8 Critical
- apache software foundation camel kApache Camel K: Camel K Cross-Namespace Build Deputy AttackCVE-2026-45760Fix available8.1 High