title: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8.5 for Spring Boot security update.
description: json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) smallrye-fault-tolerance: SmallRye Fault Tolerance spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine camel-http: org.apache.camel: bypass of header filters via specially crafted response
cpes: cpe:/a:redhat:apache_camel_spring_boot:4.8.5