{
  "repository": "https://github.com/apache/camel",
  "commit_source": "release_tag_resolution",
  "commit_sha": "6cc2920f7fd0dc642162aca00288f8dc0c9e37de",
  "submitted_target": {
    "target_kind": "release_range",
    "version": "4.15.0 through 4.18.2",
    "ref": "GHSA-rpv3-6645-2vqc / CVE-2026-40047",
    "display": "Apache Camel camel-docling affected versions before 4.18.3"
  },
  "variant_target": {
    "target_kind": "release_tag",
    "commit_sha": "6cc2920f7fd0dc642162aca00288f8dc0c9e37de",
    "version": "4.18.3",
    "ref": "refs/tags/camel-4.18.3",
    "display": "Apache Camel 4.18.3 fixed release tested via org.apache.camel:camel-docling:4.18.3 Maven artifact"
  },
  "additional_tested_targets": [
    {
      "target_kind": "release_tag",
      "commit_sha": "3864c200f46aa055a0714a069c702c433aca7097",
      "version": "4.18.2",
      "ref": "refs/tags/camel-4.18.2",
      "display": "Apache Camel 4.18.2 affected control tested via org.apache.camel:camel-docling:4.18.2 Maven artifact"
    },
    {
      "target_kind": "release_tag",
      "commit_sha": "a84c468557bba6d400fb9675351d7efe64ce01b4",
      "version": "4.21.0",
      "ref": "refs/tags/camel-4.21.0",
      "display": "Apache Camel 4.21.0 latest-line target tested via org.apache.camel:camel-docling:4.21.0 Maven artifact"
    }
  ],
  "notes": "Tag identities were resolved with git ls-remote https://github.com/apache/camel.git and recorded in bundle/logs/vuln_variant/fixed_version.txt. Runtime tests use released Maven artifacts org.apache.camel:camel-docling for the corresponding versions."
}