THREATOPS
THREAT OPSThreat News › CVE-2026-63621: Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy

CVE-2026-63621: Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy

medoss_secPublished 2026-08-24

<p>Posted by Andrea Cosentino on Aug 24</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Camel (org.apache.camel:camel-knative) 3.15.0 before 4.14.9<br /> - Apache Camel (org.apache.camel:camel-knative) 4.15.0 before 4.18.4<br /> - Apache Camel (org.apache.camel:camel-knative) 4.19.0 before 4.21.0<br /> <br /> Description:<br /> <br /> Improper Input Validation, Imprope

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/563