#apachecamel — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #apachecamel, aggregated by home.social.
-
Four Apache Camel vulnerabilities allow header injection, server-side request forgery, secret disclosure, and an authentication bypass. Patch to 4.21.0 now.
#ApacheCamel #HeaderInjection #SSRF #CyberSecurity #Vulnerability #InfoSec
-
Four Apache Camel vulnerabilities allow header injection, server-side request forgery, secret disclosure, and an authentication bypass. Patch to 4.21.0 now.
#ApacheCamel #HeaderInjection #SSRF #CyberSecurity #Vulnerability #InfoSec
-
CVE-2026-43865 (CRITICAL): Apache Camel Hazelcast component deserializes untrusted data by default, enabling RCE if attacker accesses the cluster. Patch: 4.21.0, 4.18.3, or 4.14.8. Harden configs if upgrade isn't possible. https://radar.offseq.com/threat/cve-2026-43865-cwe-502-deserialization-of-untruste-d2e34a1a7ce10b73 #OffSeq #CVE #ApacheCamel
-
CVE-2026-53913 | CRITICAL | Apache Camel Keycloak: Default KeycloakSecurityPolicy skips token verification, enabling unauthenticated access and possible RCE on 4.15.0 – 4.18.2 & 4.19.0 – 4.20.x. Upgrade to 4.21.0/4.18.3. https://radar.offseq.com/threat/cve-2026-53913-cwe-287-improper-authentication-in--29482412e19e3f00 #OffSeq #ApacheCamel #CVE202653913
-
Reminder to anyone using #ApacheCamel SCP/SFTP connections: Apache Camel does not perform host identity validation unless you explicitly configure "StrictHostKeyChecking" as "yes". The default value for "StrictHostKeyChecking" is "no". If you do not explicitly configure this option as "yes", the connections are susceptible to meddler in the middle attacks.
What is the impact of such insecure configuration?
If you are using SSH password authentication, the attacker in a privileged network position can perform full MiTM, grab the username and password, and thus gain authenticated access to the target server.
If you use a key-based authentication, the attacker cannot perform full MitM. However, they can still present a fake server and, in case of upload, steal the uploaded files. In case of download, the malicious server can present fake or malicious files for download.
So, any configuration that could get intercepted MUST always specify the host identity and use "StrictHostKeyChecking" "yes". Even configurations in secured networks should use "yes" for additional security.
Unfortunately, the Apache Camel documentation isn't clear on this topic, and the OpenSSH's similar option and its default value working in a different manner can easily lead to confusion and insecure configurations.
-
Reminder to anyone using #ApacheCamel SCP/SFTP connections: Apache Camel does not perform host identity validation unless you explicitly configure "StrictHostKeyChecking" as "yes". The default value for "StrictHostKeyChecking" is "no". If you do not explicitly configure this option as "yes", the connections are susceptible to meddler in the middle attacks.
What is the impact of such insecure configuration?
If you are using SSH password authentication, the attacker in a privileged network position can perform full MiTM, grab the username and password, and thus gain authenticated access to the target server.
If you use a key-based authentication, the attacker cannot perform full MitM. However, they can still present a fake server and, in case of upload, steal the uploaded files. In case of download, the malicious server can present fake or malicious files for download.
So, any configuration that could get intercepted MUST always specify the host identity and use "StrictHostKeyChecking" "yes". Even configurations in secured networks should use "yes" for additional security.
Unfortunately, the Apache Camel documentation isn't clear on this topic, and the OpenSSH's similar option and its default value working in a different manner can easily lead to confusion and insecure configurations.
-
In this #InfoQ article, Vignesh Durai explains how agentic and multimodal AI systems can be engineered using #ApacheCamel & #LangChain4j.
The solution combines LLM-based reasoning, retrieval-augmented generation (RAG), and image classification.
🔗 Read now: https://bit.ly/4sXdlcM
-
In this #InfoQ article, Vignesh Durai explains how agentic and multimodal AI systems can be engineered using #ApacheCamel & #LangChain4j.
The solution combines LLM-based reasoning, retrieval-augmented generation (RAG), and image classification.
🔗 Read now: https://bit.ly/4sXdlcM
-
🔴 CRITICAL: CVE-2026-40858 in Apache Camel's camel-infinispan lets attackers with cache write access trigger arbitrary code execution. Patch to 4.20.0/4.14.7/4.18.2 ASAP! More info: https://radar.offseq.com/threat/cve-2026-40858-cwe-502-deserialization-of-untruste-52424157 #OffSeq #ApacheCamel #Infosec #CVE2026_40858
-
🚨 CRITICAL: CVE-2026-23552 in Apache Camel 4.15.0 – 4.17.x breaks tenant isolation — JWT tokens from any Keycloak realm may be accepted! Upgrade to 4.18.0 ASAP to secure multi-tenant systems. https://radar.offseq.com/threat/cve-2026-23552-cwe-346-origin-validation-error-in--099c72c7 #OffSeq #ApacheCamel #Vuln #Keycloak
-
Apache Camel MCP Server: Bringing Camel Knowledge to AI Coding Assistants https://camel.apache.org/blog/2026/02/camel-jbang-mcp/ #ApacheCamel
-
Apache Camel MCP Server: Bringing Camel Knowledge to AI Coding Assistants https://camel.apache.org/blog/2026/02/camel-jbang-mcp/ #ApacheCamel
-
#ApacheCamel : almost 500 million downloads in 2025
Read the 2025 download dtatistics https://camel.apache.org/blog/2026/02/2025-downloads/ #apachecamel -
#ApacheCamel : almost 500 million downloads in 2025
Read the 2025 download dtatistics https://camel.apache.org/blog/2026/02/2025-downloads/ #apachecamel -
🇧🇷 Pessoal, dia 27/01 vou participar de um bate papo no QuarkusClub sobre #ApacheCamel focado em um tema ainda pouco explorado: a infraestrutura de código por trás dos sistemas inteligentes.
-
🇧🇷 Pessoal, dia 27/01 vou participar de um bate papo no QuarkusClub sobre #ApacheCamel focado em um tema ainda pouco explorado: a infraestrutura de código por trás dos sistemas inteligentes.
-
🥳 Wanaku 0.0.8 is LIVE! 🥳
Biggest update: Visually design #ApacheCamel routes in #Kaoto & deploy as MCP Tools in #Wanaku on OpenShift! 🚀
Also: Full MCP Auth (OIDC), Streamable HTTP, & latest #Quarkus + #ApacheCamel.
-
🥳 Wanaku 0.0.8 is LIVE! 🥳
Biggest update: Visually design #ApacheCamel routes in #Kaoto & deploy as MCP Tools in #Wanaku on OpenShift! 🚀
Also: Full MCP Auth (OIDC), Streamable HTTP, & latest #Quarkus + #ApacheCamel.
-
Apache Camel 4.14 What's New https://camel.apache.org/blog/2025/08/camel414-whatsnew/ #ApacheCamel
-
Apache Camel 4.14 What's New https://camel.apache.org/blog/2025/08/camel414-whatsnew/ #ApacheCamel
-
I published a walk-through video about building an AI Agent using #ApacheCamel, #LangFlow and the Wanaku #MCP Router
-
I published a walk-through video about building an AI Agent using #ApacheCamel, #LangFlow and the Wanaku #MCP Router
-
Want to make an impact on #opensource #integration? My team is hiring a Senior Backend Developer for #ApacheCamel #Quarkus in Dublin! We build cool stuff and contribute to #opensource.
Apply now: https://ibmglobal.avature.net/en_US/careers/JobDetail?jobId=47249 -
Want to make an impact on #opensource #integration? My team is hiring a Senior Backend Developer for #ApacheCamel #Quarkus in Dublin! We build cool stuff and contribute to #opensource.
Apply now: https://ibmglobal.avature.net/en_US/careers/JobDetail?jobId=47249 -
Like many other of my colleagues, yesterday marked the end of my chapter at #RedHat. As of today, I'm continuing that #opensource journey at #IBM.
I'll keep working on #ApacheCamel, Wanaku #MCP Router and everything else in the intersection between #integration, #cloud and #ai -
Like many other of my colleagues, yesterday marked the end of my chapter at #RedHat. As of today, I'm continuing that #opensource journey at #IBM.
I'll keep working on #ApacheCamel, Wanaku #MCP Router and everything else in the intersection between #integration, #cloud and #ai -
5 years at Red Hat today! What a journey working on #ApacheCamel, #Quarkus and #OpenSource with awesome folks, great community! Pretty wild that most of my team transitioned to IBM today, and I'll be joining soon.
Excited for what's next! -
5 years at Red Hat today! What a journey working on #ApacheCamel, #Quarkus and #OpenSource with awesome folks, great community! Pretty wild that most of my team transitioned to IBM today, and I'll be joining soon.
Excited for what's next! -
Thank you #DevoxxUK and especially to all attendees of our talk!
Slides including link to the demo repository are now published! -
Thank you #DevoxxUK and especially to all attendees of our talk!
Slides including link to the demo repository are now published! -
Camel Quarkus 3.20.0 Released https://camel.apache.org/blog/2025/03/camel-quarkus-release-3.20.0/ #ApacheCamel
-
Camel Quarkus 3.20.0 Released https://camel.apache.org/blog/2025/03/camel-quarkus-release-3.20.0/ #ApacheCamel
-
📢 #ApacheCamel Quarkus 3.20.0 version is currently under vote! This is a new LTS version 🚀
#java #integration #Quarkus -
📢 #ApacheCamel Quarkus 3.20.0 version is currently under vote! This is a new LTS version 🚀
#java #integration #Quarkus -
Amazing post showing how #ApacheCamel and #LLMs can work together to create powerful #AI-enabled applications.
https://dzone.com/articles/powering-llms-with-apache-camel-and-langchain4j
-
Amazing post showing how #ApacheCamel and #LLMs can work together to create powerful #AI-enabled applications.
https://dzone.com/articles/powering-llms-with-apache-camel-and-langchain4j
-
📢 #ApacheCamel 4.10 version is currently under vote! This is a new LTS version. Stay tuned for the new features 🚀
#java #integration -
📢 #ApacheCamel 4.10 version is currently under vote! This is a new LTS version. Stay tuned for the new features 🚀
#java #integration -
📢 #ApacheCamel Quarkus 3.18.0 version is currently under vote!
-
📢 #ApacheCamel Quarkus 3.18.0 version is currently under vote!
-
APIs effizient und flexibel gestalten – mit der REST DSL von Apache Camel kein Problem! 🐪
In der modernen #Softwareentwicklung sind flexible Schnittstellen 🔗 unverzichtbar. Apache Camel unterstützt Entwickler:innen mit der REST DSL dabei, APIs effizient und präzise zu definieren. 🛠️
Christoph Gächter teilt in seinem Blogpost spannende Einblicke und zeigt anhand eines praktischen Beispiels, wie das gelingt. 💡
-
Apache Camel 3 - End of Life https://camel.apache.org/blog/2024/12/camel3-eol/ #ApacheCamel
-
Apache Camel 3 - End of Life https://camel.apache.org/blog/2024/12/camel3-eol/ #ApacheCamel
-
Camel Quarkus 3.17.0 Released 🚀
https://camel.apache.org/blog/2024/12/camel-quarkus-release-3.17.0/
#ApacheCamel -
Camel Quarkus 3.17.0 Released 🚀
https://camel.apache.org/blog/2024/12/camel-quarkus-release-3.17.0/
#ApacheCamel -
If you missed the #Quarkus Insights #ApacheCamel AI episode with @orpiske, I’ve shared the link to the recording, slides, and demos: https://zinebbendhiba.com/apachecamel/quarkus/ai/langchain4j/quarkus-insights-camel-ai/
-
If you missed the #Quarkus Insights #ApacheCamel AI episode with @orpiske, I’ve shared the link to the recording, slides, and demos: https://zinebbendhiba.com/apachecamel/quarkus/ai/langchain4j/quarkus-insights-camel-ai/
-
Apache Camel 4.9 What's New 🌟
➡️ https://camel.apache.org/blog/2024/12/camel49-whatsnew/🚀 Camel Quarkus 3.17 bringing Camel 4.9 is currently under vote—stay tuned!
-
Apache Camel 4.9 What's New 🌟
➡️ https://camel.apache.org/blog/2024/12/camel49-whatsnew/🚀 Camel Quarkus 3.17 bringing Camel 4.9 is currently under vote—stay tuned!
-
AI is becoming a must-have in modern applications. This article explains how to connect Ollama AI using Apache Camel and the LangChain4j component.
Here’s what you’ll learn:
- How to set up the integration step-by-step
- How Camel simplifies workflows
- Why LangChain4j is a great fit for Java developershttps://contenerizar.com/how-to-connect-ollama-ai-using-apache-camel-and-langchain4j-component
#Java #AI #ApacheCamel #LangChain #langchain4j #Developers #Integration
-
AI is becoming a must-have in modern applications. This article explains how to connect Ollama AI using Apache Camel and the LangChain4j component.
Here’s what you’ll learn:
- How to set up the integration step-by-step
- How Camel simplifies workflows
- Why LangChain4j is a great fit for Java developershttps://contenerizar.com/how-to-connect-ollama-ai-using-apache-camel-and-langchain4j-component
#Java #AI #ApacheCamel #LangChain #langchain4j #Developers #Integration
-
Today I wrote a small update about the effort to modernize our testing features. This post shows how to ensure your test code is future-proof and what to expect from #ApacheCamel 4.9 and beyond.
You can read it at: https://camel.apache.org/blog/2024/10/modernizing-test-code-how-to/
-
Big update! 🚀 The new #ApacheCamel Quarkus 3.15.0 release is now up for voting.
-
A few releases ago we started an effort to cleanup some of our base test classes.
In this blog post I describe the changes so far, what #ApacheCamel
users should expect for the future and how they can prepare their code for a seamless upgrade.https://camel.apache.org/blog/2024/09/modernizing-test-support/
-
#BREAKING: After what appears to have been a minor fluke, the community has restarted the voting process for #ApacheCamel 4.8.0, a long-awaited LTS release.
-
Chunking is a crucial aspect of data processing that can significantly impact retrieval quality, query latency, costs, and even the accuracy of Large Language Model (#LLM) outputs.
If you are building #AI systems using #ApacheCamel, for instance, to help keep #data fresh for #RAG, then, Camel 4.8 brings great features for you.
Please take a look at this blog post where I talk about one of them.