Red Hat build of Apache Camel 4.8.5 for Spring Boot vulnerability

What happened

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service (DoS) issue.

Affected versions

Red Hat build of Apache Camel 4.8.5 for Spring Boot: 6.3.0 through before 6.4.2 (semver); 6.5.0 through before 6.9.0 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.