Apache Camel security advisories: 38 CVEs fixed in 4.18.5, 4.22.1 and 4.23.0

{
  "id": "51a1363c768e8af8df9ecc3878bf4300e417ff04067352e11b11bc031c94c44e",
  "url": "https://camel.apache.org/blog/2026/10/camel-security-advisories-4.23.0/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Apache Camel security advisories: 38 CVEs fixed in 4.18.5, 4.22.1 and 4.23.0",
    "summary": "Apache Camel published 38 security advisories and recommends upgrading to a fixed release. The post rates thirteen advisories HIGH and twenty-five MEDIUM; 4.14.x does not receive these fixes.",
    "evidence": "All of them are fixed in Camel 4.18.5, 4.22.1 and 4.23.0, and we recommend upgrading.",
    "products": [
      {
        "name": {
          "value": "Apache Camel",
          "evidence": "We have published 38 security advisories for Apache Camel."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.18.5",
            "evidence": "All of them are fixed in Camel 4.18.5, 4.22.1 and 4.23.0"
          },
          {
            "value": "4.22.1",
            "evidence": "All of them are fixed in Camel 4.18.5, 4.22.1 and 4.23.0"
          },
          {
            "value": "4.23.0",
            "evidence": "All of them are fixed in Camel 4.18.5, 4.22.1 and 4.23.0"
          }
        ],
        "affected_versions": [
          {
            "value": "4.14.x",
            "evidence": "35 of the 38 advisories affect 4.14.x"
          },
          {
            "value": "an earlier release",
            "evidence": "if you are on 4.14.x or an earlier release, please move to a supported one."
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-78162",
        "evidence": "CVE-2026-78162 camel-hazelcast MEDIUM"
      },
      {
        "value": "CVE-2026-78163",
        "evidence": "CVE-2026-78163 camel-docling MEDIUM"
      },
      {
        "value": "CVE-2026-78164",
        "evidence": "CVE-2026-78164 camel-http, camel-netty-http, camel-undertow, camel-vertx-http HIGH"
      },
      {
        "value": "CVE-2026-78165",
        "evidence": "CVE-2026-78165 camel-spring-redis HIGH"
      },
      {
        "value": "CVE-2026-79983",
        "evidence": "CVE-2026-79983 camel-ftp HIGH"
      },
      {
        "value": "CVE-2026-79984",
        "evidence": "CVE-2026-79984 camel-mina-sftp HIGH"
      },
      {
        "value": "CVE-2026-79985",
        "evidence": "CVE-2026-79985 camel-smb HIGH"
      },
      {
        "value": "CVE-2026-79986",
        "evidence": "CVE-2026-79986 camel-azure-files HIGH"
      },
      {
        "value": "CVE-2026-80312",
        "evidence": "CVE-2026-80312 camel-oauth HIGH"
      },
      {
        "value": "CVE-2026-80343",
        "evidence": "CVE-2026-80343 camel-netty-http HIGH"
      },
      {
        "value": "CVE-2026-80344",
        "evidence": "CVE-2026-80344 camel-as2 HIGH"
      },
      {
        "value": "CVE-2026-83531",
        "evidence": "CVE-2026-83531 camel-dynamic-router HIGH"
      },
      {
        "value": "CVE-2026-84176",
        "evidence": "CVE-2026-84176 camel-platform-http-vertx MEDIUM"
      },
      {
        "value": "CVE-2026-84178",
        "evidence": "CVE-2026-84178 camel-oauth MEDIUM"
      },
      {
        "value": "CVE-2026-84180",
        "evidence": "CVE-2026-84180 camel-knative MEDIUM"
      },
      {
        "value": "CVE-2026-84181",
        "evidence": "CVE-2026-84181 camel-shiro MEDIUM"
      },
      {
        "value": "CVE-2026-85243",
        "evidence": "CVE-2026-85243 camel-crypto-pgp MEDIUM"
      },
      {
        "value": "CVE-2026-85245",
        "evidence": "CVE-2026-85245 camel-thrift MEDIUM"
      },
      {
        "value": "CVE-2026-85246",
        "evidence": "CVE-2026-85246 camel-mina MEDIUM"
      },
      {
        "value": "CVE-2026-85247",
        "evidence": "CVE-2026-85247 camel-knative MEDIUM"
      },
      {
        "value": "CVE-2026-85248",
        "evidence": "CVE-2026-85248 camel-pqc MEDIUM"
      },
      {
        "value": "CVE-2026-85249",
        "evidence": "CVE-2026-85249 camel-tika MEDIUM"
      },
      {
        "value": "CVE-2026-85250",
        "evidence": "CVE-2026-85250 camel-xpath HIGH"
      },
      {
        "value": "CVE-2026-85251",
        "evidence": "CVE-2026-85251 camel-http HIGH"
      },
      {
        "value": "CVE-2026-85254",
        "evidence": "CVE-2026-85254 camel-platform-http MEDIUM"
      },
      {
        "value": "CVE-2026-85257",
        "evidence": "CVE-2026-85257 camel-cxf MEDIUM"
      },
      {
        "value": "CVE-2026-85260",
        "evidence": "CVE-2026-85260 camel-mllp MEDIUM"
      },
      {
        "value": "CVE-2026-85296",
        "evidence": "CVE-2026-85296 camel-as2 MEDIUM"
      },
      {
        "value": "CVE-2026-85300",
        "evidence": "CVE-2026-85300 camel-pqc MEDIUM"
      },
      {
        "value": "CVE-2026-85301",
        "evidence": "CVE-2026-85301 camel-keycloak MEDIUM"
      },
      {
        "value": "CVE-2026-85312",
        "evidence": "CVE-2026-85312 camel-core MEDIUM"
      },
      {
        "value": "CVE-2026-85313",
        "evidence": "CVE-2026-85313 camel-jetty MEDIUM"
      },
      {
        "value": "CVE-2026-85314",
        "evidence": "CVE-2026-85314 camel-mail MEDIUM"
      },
      {
        "value": "CVE-2026-85315",
        "evidence": "CVE-2026-85315 camel-grpc MEDIUM"
      },
      {
        "value": "CVE-2026-85316",
        "evidence": "CVE-2026-85316 camel-platform-http MEDIUM"
      },
      {
        "value": "CVE-2026-85317",
        "evidence": "CVE-2026-85317 camel-http MEDIUM"
      },
      {
        "value": "CVE-2026-88901",
        "evidence": "CVE-2026-88901 camel-smooks HIGH"
      },
      {
        "value": "CVE-2026-91858",
        "evidence": "CVE-2026-91858 camel-fop MEDIUM"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-apache-camel-blog",
  "document_id": 23008,
  "published_at": "2026-10-16T00:00:00+00:00"
}