CVE-2026-43867 - Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter secalerts.co
How did Camel-PQC store key metadata? Raw ObjectInputStream, no filter, so a crafted secret can trigger deserialization side effects.