{"action":"Upgrade org.apache.camel:camel-undertow to 4.8.6 (4.8.x) or 4.10.3 (4.10.x) or later.","affected":[{"fixed":"4.10.3","introduced":"4.10.0"},{"fixed":"4.8.6","introduced":"4.8.0"}],"component":"org.apache.camel:camel-undertow","cve_ids":["CVE-2025-30177"],"ecosystem":"Maven","epss":0.01295,"exploited":false,"fixed_versions":["4.10.3","4.8.6"],"ghsa_id":"GHSA-vq4p-pchp-6g6v","id":"tcs_01M5N9EJVKNBDZVEJPA7W703AK","modified_at":"2025-04-01T22:42:10.553566Z","published_at":"2025-04-01T12:30:34Z","references":["https://osv.dev/vulnerability/GHSA-vq4p-pchp-6g6v","https://nvd.nist.gov/vuln/detail/CVE-2025-30177","https://github.com/apache/camel/commit/9fd8fc30dbd98511a1faa0cbcf39ef5aeec88a64","https://camel.apache.org/security/CVE-2025-27636.html","https://camel.apache.org/security/CVE-2025-29891.html","https://github.com/apache/camel","https://lists.apache.org/thread/dj79zdgw01j337lr9gvyy4sv8xfyw8py"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vq4p-pchp-6g6v","url":"https://osv.dev/vulnerability/GHSA-vq4p-pchp-6g6v"}],"summary":"Apache Camel Missing Header Out Filter Leads to Potential Bypass/Injection Vulnerability"}