{"action":"Upgrade org.apache.camel:camel-mina to 4.14.6 (4.14.x), 4.18.2 (4.18.x) or 4.20.0 (4.20.x) or later.","affected":[{"fixed":"4.14.6","introduced":"3.0.0"},{"fixed":"4.18.2","introduced":"4.15.0"},{"fixed":"4.20.0","introduced":"4.19.0"}],"component":"org.apache.camel:camel-mina","cve_ids":["CVE-2026-40473"],"ecosystem":"Maven","epss":0.01188,"exploited":false,"fixed_versions":["4.14.6","4.18.2","4.20.0"],"ghsa_id":"GHSA-vpr3-2659-rw55","id":"tcs_01M5N9EHAYYFH9QAZS320CQVJ2","modified_at":"2026-05-05T21:41:25.759981Z","published_at":"2026-04-27T09:34:39Z","references":["https://osv.dev/vulnerability/GHSA-vpr3-2659-rw55","https://nvd.nist.gov/vuln/detail/CVE-2026-40473","https://github.com/apache/camel/pull/22583","https://github.com/apache/camel/pull/22584","https://github.com/apache/camel/pull/22585","https://github.com/apache/camel/commit/8e7f6335d2b4b096df26f8221723405ceaee275a","https://github.com/apache/camel/commit/b605816d11c253d22989abc290c198be83e3f817","https://github.com/apache/camel/commit/c35b0a3720f8c80025b06112d5d9c2932426d7f0","https://camel.apache.org/security/CVE-2026-40473.html","https://github.com/apache/camel","https://issues.apache.org/jira/browse/CAMEL-23319","http://www.openwall.com/lists/oss-security/2026/04/26/8"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vpr3-2659-rw55","url":"https://osv.dev/vulnerability/GHSA-vpr3-2659-rw55"}],"summary":"Camel-MINA Vulnerable to Deserialization of Untrusted Data"}