Apache Camel 4.22.2: OAuth Token Cache, Docling and Saxon XXE CVEs
Apache Camel disclosed eight CVEs on 23 Oct 2026, led by a Saxon XXE and an OAuth token cache mixup. Upgrade to 4.22.2, 4.23.0 or 4.18.5; none exploited.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Apache Camel disclosed eight CVEs on 23 Oct 2026, led by a Saxon XXE and an OAuth token cache mixup. Upgrade to 4.22.2, 4.23.0 or 4.18.5; none exploited.
A web server flaw at prepaid platform Value Card exposed 1,424,748 card IDs with PINs and balances, 1,133,070 of them MOS CARD. Facts, timeline, checks.
A smart thermostat is a sensor board, relays that switch 24 V HVAC wires, a Wi-Fi or Thread radio and signed firmware. How each part is built and secured.
A smart ring packs optical sensors, a tiny curved battery and a Bluetooth chip into a sealed shell. How it is built, how PPG works and where data goes.
Supercell says internal meeting videos were copied from a third-party video platform and it filed a CRA notification. What leaked and how CRA works.
AdFection used targeted ads from Discover-Tech to profile devices and deliver Candiru spyware with no click. What happened, the IOCs, and how to defend.
The Beer-Lambert law, A = εlc, links absorbance to concentration. Terms, history, worked lab examples and how pulse oximeters use two wavelengths.
ANP gives AI agents web hosted DID identities, signed HTTP requests and optional protocol negotiation. How did:wba works, what is draft, and the risks.
The Stefan-Boltzmann law: radiated power is e σ A T⁴. Worked examples for the Sun, Earth's energy balance, a person and a thermal camera's emissivity.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.