Andrea Cosentino

Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions

Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default

Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State

Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions

Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim

Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions

Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header

Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set

Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)