Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-11973
9.8
CRITICALCVSS v3
Published
May 14, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.>= 3.0.0, <= 3.1.0, >= 2.22.0, <= 2.25.0NVD