Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.apache.camel:camel-snakeyaml(Maven) | 0 | 2.17.5 | N/A |
| org.apache.camel:camel-snakeyaml(Maven) | 2.18.0 | 2.18.2 | N/A |
CVSS Metrics