Known vulnerabilities in Red Hat build of Apache Camel for Spring Boot 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-70974 | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key… | 10.0 Critical | Jan 9, 2026 |
| CVE-2025-12543 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | 9.6 Critical | Jan 7, 2026 |
| CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | High | Dec 3, 2025 |
| CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 Medium | Jul 8, 2024 |
| CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 High | Feb 19, 2024 |
| CVE-2023-5236 | Infinispan: circular reference on marshalling leads to dos | 4.4 Medium | Dec 18, 2023 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 505
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 478
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 462
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433