{"action":"Upgrade org.apache.camel:camel-pqc to 4.18.2 or later.","affected":[{"fixed":"4.18.2","introduced":"0"}],"component":"org.apache.camel:camel-pqc","cve_ids":["CVE-2026-40048"],"ecosystem":"Maven","exploited":false,"fixed_versions":["4.18.2"],"ghsa_id":"GHSA-v3vg-332r-mw99","id":"tcs_01M5N9D4CVEPJEYAPCW58778RY","modified_at":"2026-09-10T03:51:03.238057212Z","published_at":"2026-04-27T09:34:38Z","references":["https://osv.dev/vulnerability/GHSA-v3vg-332r-mw99","https://nvd.nist.gov/vuln/detail/CVE-2026-40048","https://github.com/apache/camel/pull/22034","https://github.com/apache/camel/pull/22495","https://github.com/apache/camel/commit/5bdd0f1d3289dfa78116deec6c81083708bf432d","https://github.com/apache/camel/commit/5f87a86f4e337efc59248d278c6a5650e73b3b7c","https://camel.apache.org/security/CVE-2026-40048.html","https://github.com/apache/camel","https://issues.apache.org/jira/browse/CAMEL-23200","http://www.openwall.com/lists/oss-security/2026/04/26/6"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-v3vg-332r-mw99","url":"https://osv.dev/vulnerability/GHSA-v3vg-332r-mw99"}],"summary":"Camel-PQC Vulnerable to Deserialization of Untrusted Data"}