Red Hat Integration Camel Quarkus
46 CVEs tracked. 3 of them are in CISA KEV.
This hub aggregates every CVE we track for Red Hat Integration Camel Quarkus, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Integration Camel Quarkus CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 1 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 46 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical5
- High19
- Medium21
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Integration Camel Quarkus.
- CVE-2023-4639Undertow: cookie smuggling/spoofing7.4
- CVE-2023-39410Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5
- CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3
- CVE-2022-4244Codehaus-plexus: directory traversal7.5
- CVE-2023-4853Quarkus: http security policy bypass8.1
- CVE-2023-40167Jetty accepts "+" prefixed value in Content-Length5.3
- CVE-2023-1108Undertow: infinite loop in sslconduit during close7.5
- CVE-2022-1415Drools: unsafe data deserialization in streamutils8.1
- CVE-2023-33008Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale5.3
- CVE-2023-34462netty-handler SniHandler 16MB allocation6.5
- CVE-2023-26049Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4
- CVE-2023-26048OutOfMemoryError for large multipart without filename in Eclipse Jetty5.3
- CVE-2021-46877jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving Jso...7.5
- CVE-2022-41966XStream Denial of Service via stack overflow 8.2
- CVE-2022-46175JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including vers...7.1
Product grouping is registry-driven, with AI assist and human review. How it works