Andrea Cosentino

Mirror of Apache Camel

Runs Camel on Spring Boot and provides starters for Camel components

Try Hack Me and Hack The Box machines walkthrough

Apache Camel K is a lightweight integration platform, born on Kubernetes, with serverless superpowers

MongoDB University Course M101J 14 October - 9 December 2014

A simple Finnhub.io java client

A CentOS 6.5 x64 Vagrant Machine with Tomcat puppet module

MongoDB University Course M102 6 January - 24 February 2014

A camel-kafka-connector-demo

A bunch of examples using Apache Cassandra and Datastax Java driver for Apache Cassandra

Camel component for Apache Cassandra using Datastax java driver

Red Hat Fuse ansible Playbook (WIP)

CVE-2024-22369 Reproducer

A collection of kamelet samples

A Camel route based on camel-cassandra component https://github.com/oscerd/camel-cassandra

A Camel route, to be deployed on Servicemix, based on camel-cassandra component https://github.com/oscerd/camel-cassandra

A Set of Quickstarts using Apache Kafka

A flexible, customizable, open source platform that provides core integration capabilities as a service.

Reproducer for CVE-2026-40047: Apache Camel camel-docling CLI argument injection / path traversal

Post-Quantum Cryptography (PQC) TLS 1.3 examples with Apache Camel using X25519MLKEM768 hybrid key exchange on JDK 21 (BouncyCastle) and JDK 27 (native)

Java version of LangChain

An example of camel-quartz2 route

Reproducer for CVE-2026-40858 — Apache Camel camel-infinispan remote aggregation repository unsafe deserialization (RCE)

Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec

An Camel Spring Boot example for hashicorp vault and Kaoto

A dojo for playing with Apache Camel and see usecases for components

Apache Flink Kubernetes Operator

A collection of samples and material related to process injection

A Camel-Infinispan Standalone route to Query Infinispan during Infinispan-Kafka connector is working

No description.

An Ansible Role for Kafka

🍻 Default formulae for the missing package manager for macOS

Mirror of Apache Kafka

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

Apache Camel on OCP Best practices example and docs

Apache Camel Kamelet Repository

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

RFC3161 Timestamp Authority

A Kafka Producer to send data to be used by Infinispan-Kafka connector

No description.

Quarkus extensions for Azure services

A collection of CVE Proof of concepts

Apache Camel Website

Mirror of Apache HttpClient

Next version of the UI of the Kaoto project

The Kubernetes operator that helps with running Kaoto in K8s clusters

community-operators metadata backing OpenShift OperatorHub

The canonical source for Kubernetes Operators that are published on OperatorHub.io and part of the default catalog of the Operator Lifecycle Manager.

Example of switching from Camel K to Camel Quarkus runtime

The aim of this repository is showing a Kamelet catalog ready to be used in Cloud context

A JMS Connection pool for messaging applications supporting JMS 1.1 and 2.0 and Jakarta JMS clients

Puppet module installing Tomcat

Basic Producer Consumer with Avro and Apicurio

Quarkus: Supersonic Subatomic Java.

A Maven Plugin for generating schema of multiple types from POJOs

A simple S3 examples with Fuse 7

Puppet module installing Servicemix

No description.

Italian Hello World for testing purpose

Reproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-48203: Apache Camel camel-solr SolrParam./SolrField. header injection enabling Solr document-field injection and SSRF via the shards parameter (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-exec) through CXF-RS/CXF-SOAP/Knative endpoints (fixed in 4.14.6/4.18.2/4.19.0)

Reproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via property-placeholder resolution (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46592: Apache Camel camel-cxf operationName header injection redirecting the invoked SOAP operation (confused deputy) from a read to a destructive one (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization bypass / cross-label data exfiltration (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-2026-40048 (fixed in 4.18.3/4.21.0)

Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data destruction (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46585: Apache Camel camel-lucene QUERY header injection enabling authorization bypass / index data exfiltration (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46584: Apache Camel camel-mail mail.smtp.* header injection enabling credential theft via on-path SOCKS interception (fixed in 4.14.8/4.18.3/4.21.0)

Reproducer for CVE-2026-46457 — Apache Camel camel-nats inbound header injection (Camel control-header injection via a NATS publisher; CamelHttpUri -> SSRF)

Reproducer for CVE-2026-46456 — Apache Camel camel-aws2-sqs inbound message-attribute header injection (Camel control-header injection via sqs:SendMessage → downstream producer steering / RCE)

Reproducer for CVE-2026-46455 — Apache Camel camel-keycloak missing TokenVerifier.IS_ACTIVE check (expired access tokens accepted)

Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering / RCE)

Reproducer for CVE-2026-46453 — Apache Camel camel-elasticsearch-rest-client unprefixed-header injection (operation/query override via inbound HTTP headers)

Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE)

Reproducer for CVE-2026-43866 — Apache Camel camel-jms forged DefaultExchangeHolder bypass of the CVE-2026-40860 deserialization filter (Exchange-state injection)

Reproducer for CVE-2026-43865 — Apache Camel camel-hazelcast default-configured instance unsafe Java deserialization (RCE)

Reproducer for CVE-2026-42527 — Apache Camel permissive default ObjectInputFilter admits java.net.URL, enabling a DNS-based out-of-band side channel

Reproducer for CVE-2026-40860 — Apache Camel camel-jms/sjms/amqp JMS ObjectMessage unsafe deserialization (RCE)

Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Reproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)

Reproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)

Reproducer for CVE-2026-40048: Apache Camel camel-pqc FileBasedKeyLifecycleManager unsafe deserialization (RCE)

Reproducer for CVE-2026-40022: Apache Camel camel-platform-http-main authentication bypass on non-root context paths

Reproducer for CVE-2026-33453: Apache Camel camel-coap header injection to RCE via camel-exec

Reproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)

CVE-2026-40564: SSRF via FlinkSessionJob jarURI in apache/flink-kubernetes-operator. Self-contained reproducer that runs on a local kind cluster with one make command.

Agent-assisted maintainership and development framework for Apache projects — Triage and Drafting (agent-authored fixes with human review); Mentoring, Pairing (developer-side dev-cycle), and Auto-merge on the roadmap.

No description.

Common React-based UI components for Apicurio project UIs.

Repository to hold some code generation utilities.

A plugin for accessing Apicurio Registry information from vscode.

An API/Schema registry - stores APIs and Schemas.

Apache Camel Quarkus

Camel Kafka Connector allows you to use all Camel components as Kafka Connect connectors

Apache Camel Karaf support

OpenID Connect Proxy

No description.

A Kroxylicious filter plugin that provides transparent post-quantum (ML-KEM + AES-256-GCM) record-level encryption for Apache Kafka, requiring zero client code changes.

No description.

Example applications using the Apicurio Registry.

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

CVE-2026-25747 - Camel LevelDB Deserialization Vulnerability

Securing the Camel JBang MCP server with Keycloak OIDC

No description.

A Jbang SEC Edgar CLI

A Java API for Docling

Stock Market Analysis and Intelligence Platform

An AWS Security Tool Quarkus MCP Server based

Bouncy Castle Java Distribution (Mirror)

Wanaku MCP Router

An AWS SQS to Solace integration through Apache Camel

Docker image for WildFly project

Website sources for the Apache Security website

No description.

Automatically create tags and corresponding releases (updated)

Implementation of the RAFT consensus protocol in JGroups

DataStax Java Driver for Apache Cassandra

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Apache Flink

No description.

No description.

A collection of integration tests for Kamelets

Autonomous Performance Tuning for Kubernetes !

A Jbang app to consume events from Cloudtrail and filter them

Google OAuth Client Library for Java

PLC4X The Industrial IoT adapter

Quarkus Amazon Services extensions

Maven Daemon

A collection of examples for using Terraform

No description.

Vitess is a database clustering system for horizontal scaling of MySQL.

A Camel Quarkus Kafka producer/consumer example involving Service Registry

A JFR raw data Extractor made with JBang

https://openjdk.java.net/projects/shenandoah

No description.

Some camel-k-runtime examples with kamelets and more

A simple Example of converting a CSV to XLSX with Rust

Camel 2.x example with AWS Kinesis

Quarkus Jooq Extension

Gather, curate, and feature stories of public servants and civic hackers using GitHub as part of their open government innovations

No description.

A simple Lambda function for getting the contributions to Apache Camel of a particular Github user

Apache Camel Quarkus Examples

Mirror of Apache STeVe

Some ebpf examples based on BCC

This is the project for OpenJDK Mission Control, a production time profiling and diagnostics tools suite. https://openjdk.java.net/projects/jmc/

A Golang CLI for Finnhub.io

https://openjdk.java.net/projects/skara/

A simple consumer for Kafka with Avro and Apicurio Registry

Creating a simple json schema with mbknor-jackson-jsonSchema

Dockerfiles for different version of Apache Cassandra

Home for Red Hat Integration Kamelets

A demo using camel-infinispan

Træfɪk, a modern reverse proxy

MVEL (MVFLEX Expression Language)

A simple Java example for an AWS Lambda function invoked by camel-kafka-connector aws2-lambda

No description.

User documentation for Knative components.

The natural database connection pool

Apache Maven Checkstyle Plugin

Apache Maven Plugin Tools

No description.

Change data capture for a variety of databases. https://debezium.io Please log issues in our JIRA at https://issues.jboss.org/projects/DBZ/issues

a quickstart showing how to use Spring Boot, Apache Camel and Apache ActiveMQ together with Kubernetes or OpenShift

Java API for GitHub

A demo for Infinispan-Kafka connector

Zipkin is a distributed tracing system

Quickstart to show Camel Infinispan component in Spring Boot

Current public website

Mirror of Apache Felix

Distributed reliable key-value store for the most critical data of a distributed system

Camel-cassandra docker image initialized for testing idempotency

Camel-cassandra docker image initialized for testing named aggregation repo

Camel-cassandra docker image initialized for testing aggregation repo

etcd java client

Camel-cassandra docker image initialized for test

A Repository with a bunch of Fuse 7 examples

Jenkins Continuous Integration Server

Maven plugin for running and creating Docker images

Installation templates and other objects for installing Red Hat Fuse Ignite (based on Syndesis)

a quickstart showing how to use spring boot and camel with the XML DSL together with Kubernetes or OpenShift

Java client for Kubernetes & OpenShift 3

Get information about countries via a RESTful API

Reactive Kafka Client for Vert.x

Collection of Syndesis extensions

An extension of okhttp's mockwebserver, that provides a DSL and is easier to use

No description.

Just a Syndesis tech extension example

Official Java client library for kubernetes

A high performance caching library for Java 8

Apache Camel Connectors for Syndesis

Maven plugin for getting your Java apps on to Kubernetes and OpenShift

Kafka as a Service with Docker and Kubernetes/Openshift

Dockerfile for MongoDB

A simple Caffeine gRPC example

A code repository for the Fuse and BxMS integration components.