Apache Software Foundation Apache Camel Karavan vulnerabilities

2 CVEs affecting Apache Software Foundation Apache Camel Karavan, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-103413, published 2026-10-09.

More from Apache Software Foundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-103412, published 2026-10-09. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as…
• CVE-2026-103413, published 2026-10-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the…