Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-3159
7.5
HIGHCVSS v2
Published
March 7, 2017
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.<= 2.14.4, >= 2.17.0, <= 2.17.4, >= 2.18.0, <= 2.18.1NVD