Skip to content
Threat Feed
Subscribe

Product

Org.apache.camel:camel-Aws2-S3 (4.8.0 Before 4.18.5)

1 brief RSS
medium advisory

Apache Camel: Expression Language Injection in Camel-AWS2-S3 (CVE-2026-95664)

The Apache Camel AWS2-S3 component is vulnerable to Expression Language Injection. The Camel-AWS2-S3 producer evaluates untrusted S3 object keys from the CamelAwsS3Key header as Simple expressions.

org.apache.camel:camel-aws2-s3 +1
1c