--- title: "Security digest: July 6, 2026" url: https://erroneo.us/security/2026-07-06/ description: "July 6, 2026 vulnerability digest: 19 critical advisories (crates.io (Rust), Maven…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-07-06 date_modified: 2026-07-06 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: July 6, 2026 19 critical advisories. ## Take stock - Maven: 10 critical advisories ( org.apache.camel:camel-aws2-sns , org.apache.camel:camel-docling , org.apache.camel:camel-cometd , org.apache.camel:camel-keycloak , org.apache.camel:camel-dns , org.apache.camel:camel-mongodb-gridfs , org.apache.camel:camel-aws2-sqs , org.apache.camel:camel-pqc …). Check with mvn dependency:tree -Dincludes=: . - npm: 3 critical advisories ( 9router , @xhmikosr/decompress , decompress ). Check with npm audit (or: npm ls ) . - PyPI: 3 critical advisories ( langroid ). Check with pip-audit (or: pip show ) . - crates.io (Rust): 1 critical advisory ( zebrad , halo2_gadgets , orchard , zcash_primitives ). Check with cargo audit . - Composer (PHP): 1 critical advisory ( verbb/formie ). Check with composer audit . - Go: 1 critical advisory ( github.com/cilium/cilium ). Check with govulncheck ./... . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2026-54496](https://erroneo.us/security/cve/CVE-2026-54496/index.md) Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness — crates.io (Rust) zebrad <= 4.5.1 → 5.0.0; crates.io (Rust) halo2_gadgets < 0.5.0 → 0.5.0; crates.io (Rust) orchard < 0.14.0 → 0.14.0 - [CVE-2026-56140](https://erroneo.us/security/cve/CVE-2026-56140/index.md) Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy — Maven org.apache.camel:camel-aws2-sns >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-aws2-sns >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-aws2-sns >= 4.19.0, < 4.21.0 → 4.21.0 - [GHSA-vjc7-jrh9-9j86](https://erroneo.us/security/ghsa/GHSA-vjc7-jrh9-9j86/index.md) 9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats — npm 9router <= 0.4.41 → no fix - [CVE-2026-40047](https://erroneo.us/security/cve/CVE-2026-40047/index.md) Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer — Maven org.apache.camel:camel-docling >= 4.15.0, < 4.18.3 → 4.18.3 - [CVE-2026-46454](https://erroneo.us/security/cve/CVE-2026-46454/index.md) Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers — Maven org.apache.camel:camel-cometd >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-cometd >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-cometd >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-55500](https://erroneo.us/security/cve/CVE-2026-55500/index.md) 9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover — npm 9router <= 0.4.71 → no fix - [CVE-2026-53913](https://erroneo.us/security/cve/CVE-2026-53913/index.md) Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities — Maven org.apache.camel:camel-keycloak >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-keycloak >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-54769](https://erroneo.us/security/cve/CVE-2026-54769/index.md) Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent — PyPI langroid <= 0.65.1 → 0.65.2 - [CVE-2026-46455](https://erroneo.us/security/cve/CVE-2026-46455/index.md) Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted — Maven org.apache.camel:camel-keycloak >= 4.18.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-keycloak >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-53486](https://erroneo.us/security/cve/CVE-2026-53486/index.md) Decompress: Archive extraction can create files and links outside of the target directory — npm @xhmikosr/decompress < 10.2.1 → 10.2.1; npm @xhmikosr/decompress >= 11.0.0, < 11.1.3 → 11.1.3; npm decompress <= 4.2.1 → no fix - [CVE-2026-48205](https://erroneo.us/security/cve/CVE-2026-48205/index.md) Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF) — Maven org.apache.camel:camel-dns >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-dns >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-dns >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-48204](https://erroneo.us/security/cve/CVE-2026-48204/index.md) Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered gridfs.* HTTP headers — Maven org.apache.camel:camel-mongodb-gridfs >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-mongodb-gridfs >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-mongodb-gridfs >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-46456](https://erroneo.us/security/cve/CVE-2026-46456/index.md) Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers — Maven org.apache.camel:camel-aws2-sqs >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-aws2-sqs >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-aws2-sqs >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-43867](https://erroneo.us/security/cve/CVE-2026-43867/index.md) Apache Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter — Maven org.apache.camel:camel-pqc >= 4.18.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-pqc >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-54760](https://erroneo.us/security/cve/CVE-2026-54760/index.md) Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls — PyPI langroid <= 0.65.0 → 0.65.1 - [CVE-2026-52889](https://erroneo.us/security/cve/CVE-2026-52889/index.md) Formie Hidden field defaults vulnerable to Server-Side Template Injection — Composer (PHP) verbb/formie < 3.1.27 → 3.1.27 - [CVE-2026-48203](https://erroneo.us/security/cve/CVE-2026-48203/index.md) Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields — Maven org.apache.camel:camel-solr >= 4.0.0, < 4.14.8 → 4.14.8; Maven org.apache.camel:camel-solr >= 4.15.0, < 4.18.3 → 4.18.3; Maven org.apache.camel:camel-solr >= 4.19.0, < 4.21.0 → 4.21.0 - [CVE-2026-49445](https://erroneo.us/security/cve/CVE-2026-49445/index.md) Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access — Go github.com/cilium/cilium >= 1.19.0, < 1.19.2 → 1.19.2; Go github.com/cilium/cilium >= 1.18.0, < 1.18.8 → 1.18.8; Go github.com/cilium/cilium < 1.17.14 → 1.17.14 - [CVE-2026-55615](https://erroneo.us/security/cve/CVE-2026-55615/index.md) Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879 — PyPI langroid <= 0.65.4 → 0.65.5 --- Source page: https://erroneo.us/security/2026-07-06/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt