| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.camel:camel-hessian | ≥ 2.0, < 2.19.4≥ 2.20.0, < 2.20.1 | 2.19.42.20.1 |
| camel | ≥ 2.0.0, < 2.19.4≥ 2.20.0, < 2.20.1 | 2.19.42.20.1 |
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free