HIGH7.3

GHSA-hh8r-75r6-qrg9

Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parameters

Quick fix

GHSA-hh8r-75r6-qrg9 — org.apache.camel:camel-langchain4j-tools: upgrade to the fixed version with the command below.

# pom.xml: bump <version>4.18.3</version> for org.apache.camel:camel-langchain4j-tools

Details

Improper Input Validation vulnerability in Apache Camel.

This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0.

Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.

Enter the version of the package you're using.

Introduced in: 4.8.0Fixed in: 4.18.3

Fix# pom.xml: bump <version>4.18.3</version> for org.apache.camel:camel-langchain4j-tools

Introduced in: 4.19.0Fixed in: 4.21.0

Fix# pom.xml: bump <version>4.21.0</version> for org.apache.camel:camel-langchain4j-tools

Introduced in: 4.8.0Fixed in: 4.18.3

Fix# pom.xml: bump <version>4.18.3</version> for org.apache.camel:camel-langchain4j-agent

Introduced in: 4.19.0Fixed in: 4.21.0

Fix# pom.xml: bump <version>4.21.0</version> for org.apache.camel:camel-langchain4j-agent

Introduced in: 4.8.0Fixed in: 4.18.3

Fix# pom.xml: bump <version>4.18.3</version> for org.apache.camel:camel-spring-ai-tools

Introduced in: 4.19.0Fixed in: 4.21.0

Fix# pom.xml: bump <version>4.21.0</version> for org.apache.camel:camel-spring-ai-tools