Apache Camel Karavan vulnerabilities

2 known vulnerabilities in Apache Camel Karavan from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Improper input validation vulnerability in Apache Camel Karavan.

  CVE-2026-103413Oct 9, 2026Apache

  Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting

• 8.8 High severity

  Apache Camel Karavan: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-103412Oct 9, 2026Apache

  Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy