Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-46292Highopenbabel: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)CVE-2026-49042Highorg.apache.camel:camel-langchain4j-tools: Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parametersCVE-2026-49297Highapache-airflow-providers-google: Apache Airflow Google provider allows path traversal through GCS object namesCVE-2026-46587Highorg.apache.camel:camel-couchbase: Apache Camel-Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputCVE-2026-46588Highorg.apache.camel:camel-couchdb: Apache Camel-CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputCVE-2026-56139Mediumorg.apache.camel:camel-undertow: Apache Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in…CVE-2026-53913Criticalorg.apache.camel:camel-keycloak: Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open…CVE-2026-49097Mediumorg.apache.camel:camel-irc: Apache Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header…CVE-2026-49086Mediumorg.apache.camel:camel-dapr: Apache Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headersCVE-2026-49098Mediumorg.apache.camel:camel-kafka: Apache Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the…CVE-2026-48205Criticalorg.apache.camel:camel-dns: Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF) CVE-2026-48206Mediumorg.apache.camel:camel-jira: Apache Camel-JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filterCVE-2026-49365Mediumorg.apache.camel:camel-netty-http: Apache Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in…CVE-2026-49099Mediumorg.apache.camel:camel-salesforce: Apache Camel-Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filterCVE-2026-55993Highorg.apache.camel:camel-atmosphere-websocket: Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a…CVE-2026-55994Highorg.apache.camel:camel-iggy: Apache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategyCVE-2026-56140Criticalorg.apache.camel:camel-aws2-sns: Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategyCVE-2026-48204Criticalorg.apache.camel:camel-mongodb-gridfs: Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered  gridfs.*  HTTP…CVE-2026-46592Highorg.apache.camel:camel-cxf-soap: Apache Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the…CVE-2026-46590Highorg.apache.camel:camel-pqc: Apache Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with…CVE-2026-46726Highorg.apache.camel:camel-vertx-websocket: Apache Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a…CVE-2026-46585Highorg.apache.camel:camel-lucene: Apache Camel-Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header…CVE-2026-46591Highorg.apache.camel:camel-neo4j: Apache Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without…CVE-2026-46456Criticalorg.apache.camel:camel-aws2-sqs: Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message…CVE-2026-48203Criticalorg.apache.camel:camel-solr: Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter,…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo