GHSA-46jf-c9vx-hh79
Suggest an improvement- Source
- https://github.com/advisories/GHSA-46jf-c9vx-hh79
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-46jf-c9vx-hh79/GHSA-46jf-c9vx-hh79.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-46jf-c9vx-hh79
- Aliases
- Published
- 2026-07-06T12:31:30Z
- Modified
- 2026-08-28T19:45:09.045140435Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- Apache Camel-Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input
- Details
-
Improper Input Validation vulnerability in Apache Camel.
This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0.
Users are recommended to upgrade to version 4.14.8, 4.18.3, 4.21.0, which fixes the issue.
- Database specific
{ "nvd_published_at": "2026-07-06T11:16:28Z", "github_reviewed_at": "2026-08-28T19:34:04Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-20" ] }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2026-46587
- https://github.com/apache/camel/pull/23228
- https://github.com/apache/camel/pull/23230
- https://github.com/apache/camel/pull/23231
- https://github.com/apache/camel/commit/8d74cdca9befc74b49d9c52ac6a145be1d413e7d
- https://github.com/apache/camel/commit/c16f7ef39849ae8819f50c959b538350b8f839e9
- https://github.com/apache/camel/commit/d0dfa4e0ebd062acaf4a86ca476bb4305db9bfd4
- https://camel.apache.org/security/CVE-2026-46587.html
- https://github.com/apache/camel
- https://github.com/apache/camel/releases/tag/camel-4.14.8
- https://github.com/apache/camel/releases/tag/camel-4.18.3
- https://github.com/apache/camel/releases/tag/camel-4.21.0
- http://www.openwall.com/lists/oss-security/2026/07/06/15
Affected packages
Maven / org.apache.camel:camel-couchbase
Package
- Name
- org.apache.camel:camel-couchbase
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.camel/camel-couchbase
Affected versions
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.2.0
4.3.0
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.5.0
4.6.0
4.7.0
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
4.8.7
4.8.8
4.8.9
4.9.0
4.10.0
4.10.1
4.10.2
4.10.3
4.10.4
4.10.5
4.10.6
4.10.7
4.10.8
4.10.9
4.11.0
4.12.0
4.13.0
4.14.0
4.14.1
4.14.2
4.14.3
4.14.4
4.14.5
4.14.6
4.14.7
Maven / org.apache.camel:camel-couchbase
Package
- Name
- org.apache.camel:camel-couchbase
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.camel/camel-couchbase
Maven / org.apache.camel:camel-couchbase
Package
- Name
- org.apache.camel:camel-couchbase
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.camel/camel-couchbase