CVE-2017-3159
Fixed upstream EPSS 6%
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
Products: Apache Software Foundation Apache Camel
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.camel:camel-snakeyaml | 2.17.5 |
| Maven | org.apache.camel:camel-snakeyaml | 2.18.2 |