[camel-cxf-all@4.18.2] Apache CXF < 4.1.6 (CVE-2026-44417)

[LeoKeogh]

Hello,

Is a camel-cxf-all@4.18.3 planned with the bundled CXF updated that would remove https://nvd.nist.gov/vuln/detail/CVE-2026-44417 from showing up in our vulnerability scans?

Thanks in advance for your help.

Best regards,
Leo Keogh.

[jbonofre]

@LeoKeogh thanks for the issue. I will tackle that.

[jayglenat]

Hi @jbonofre,
Do you have any ETA to communicate on this one ?
Thank you in advance.

[jbonofre]

@jayglenat this week for sure (sorry I was busy on other projects last week). I will keep you posted.

[jayglenat]

Hello @jbonofre,
I see that there has been some work on upgrading Apache CXF.
Is there a date when the new patch will be available ?
Thanks.
JA

[jbonofre]

@jayglenat yes I did the updates. I will do the release as soon as I will be back from vacation (August 20th).