> CVE-2025-66169

« BACK_TO_HOME
PUBLISHED
2026-01-14 12:16
MODIFIED
2026-01-14 12:16
EPSS (Prob. Exploit)
0.64%
Top 48.8%
DATA SOURCES:
NVD 🔗 2026-01-14 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-4jrw-64vr-7g8m MODERATE

Apache Camel camel-neo4j component is vulnerable to cypher injection

AFFECTED PACKAGES:
MAVEN / org.apache.camel:camel-neo4j
>= 4.15.0, < 4.17.0
Fixed in: 4.17.0
MAVEN / org.apache.camel:camel-neo4j
>= 4.14.0, < 4.14.3
Fixed in: 4.14.3
MAVEN / org.apache.camel:camel-neo4j
>= 4.10.0, < 4.10.8
Fixed in: 4.10.8

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
GHSA-4jrw-64vr-7g8m

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/01/2026 12:16
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:39
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://camel.apache.org/security/CVE-2025-66169.html
« BACK_TO_HOME