CVE-2026-66906: Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

<p>Posted by Andrea Cosentino on Aug 24</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Camel (org.apache.camel:camel-azure-storage-blob) 4.0.0 before 4.14.9<br /> - Apache Camel (org.apache.camel:camel-azure-storage-blob) 4.15.0 before 4.18.4<br /> - Apache Camel (org.apache.camel:camel-azure-storage-blob) 4.19.0 before 4.22.0<br /> <br /> Description:<br /> <br /> Re