description: Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
problem types: Java deserialization
affected:
{
product: Apache Camel
vendor: Apache Software Foundation
versions:
status: affected, version: 2.17.0 to 2.17.4
status: affected, version: 2.18.0 to 2.18.1
status: affected, version: The unsupported Camel 2.x (2.14 and earlier) versions may be also affected.
}