VYPR

Camel XPath component

by Apache

CVEs (1)

  • CVE-2026-85250HigOct 19, 2026
    risk 0.42cvss 7.5epss —

    Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. With documentType set to InputSource, XPathBuilder handed the payload straight to…