Camel-Http (4.0.0-4.18.4, 4.19.0-4.22.0)

CVE-2026-85251 allows for unauthorized credential exposure when the camel-http component follows HTTP redirects to attacker-controlled hosts.