Known vulnerabilities in Red Hat build of Apache Camel for Spring Boot 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44890	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44250	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-44486	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44487	Axios is a promise based HTTP client for the browser and Node.js	8.2 High	Jun 11, 2026
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-44417	The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that…	Not rated	May 22, 2026
CVE-2026-44930	An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an…	Not rated	May 22, 2026
CVE-2026-47323	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative…	Not rated	May 19, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-44248	Netty is an asynchronous, event-driven network application framework	5.3 Medium	May 13, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 High	May 13, 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-40682	XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions…	Not rated	May 4, 2026

Other Red Hat products