org.apache.camel.quarkus vulnerabilities

Products

• org.apache.camel.quarkus/camel-quarkus-support-xalan 1

Latest org.apache.camel.quarkus CVEs

Newest publication first

1. CVE-2026-88789 Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

   Published 2026-10-01

   High·CVSS 8.6 EPSS 0.41%

   Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.