Browse CVEs by Ecosystem and Severity

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)

Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy

Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

Apache Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered  gridfs.*  HTTP headers

Apache Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

Apache Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)

Apache Camel-Vertx-Http and Camel-Netty-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

Apache Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter

Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Apache Camel JMS deserialization filter bypass

Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

LaunchServer FileServerHandler has an unauthenticated path traversal issue

OpenAM has Unsafe Java Deserialization via SNS

OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints

OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE

Jenkins Script Security Plugin sandbox bypass vulnerability

Jenkins External Workspace Manager Plugin has a path traversal vulnerability

Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist

jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation

OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

expr-eval vulnerable to Code Execution

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Spinnaker has non-safe yaml deserialization, allowing RCE when using specific types

OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

Apache NiFi: Missing authorization when replacing Process Groups with restricted components

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)

CedarJava has policy injection vulnerability

CedarJava has type confusion vulnerability

HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory

LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks

Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure

SNMP4J-Agent allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath component

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

Apache CXF has JNDI Injection Vulnerability in JMSConfigFactory

Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl

Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator

Apache CXF OAuth2 Log Injection via Unsanitized Client Identifier