Claude Security

Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)

Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys

Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address

Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow

Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse

Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target