Red Hat build of Apache Camel for Spring Boot 4 — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Red Hat build of Apache Camel for Spring Boot 4, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-114370	Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal CWE-22	3.7	Low	2026-10-21
CVE-2026-93576	Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419) CWE-93	7.5	High	2026-09-18
CVE-2026-93560	Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos CWE-1035	7.5	High	2026-09-18
CVE-2026-93563	Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos CWE-1035	7.5	High	2026-09-18
CVE-2026-93578	Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass CWE-1035	5.9	Medium	2026-09-18
CVE-2026-93572	Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits CWE-770	7.5	High	2026-09-18
CVE-2026-93561	Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling CWE-1035	6.5	Medium	2026-09-18
CVE-2026-93493	Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field CWE-299	5.9	Medium	2026-09-18
CVE-2026-93494	Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated CWE-1035	7.5	High	2026-09-18
CVE-2026-81624	Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite CWE-770	7.5	High	2026-08-31
CVE-2026-19879	Io.undertow/undertow: undertow: http response header integrity issue due to character truncation CWE-681	5.3	Medium	2026-08-14

All 11 known CVE vulnerabilities affecting Red Hat build of Apache Camel for Spring Boot 4 with full Chinese analysis, references, and POCs where available.