You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2026/04/16 04:13:57 UTC

(camel-kafka-connector) branch main updated: [create-pull-request] automated change (#1764)

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-kafka-connector.git


The following commit(s) were added to refs/heads/main by this push:
     new 01b9268c25 [create-pull-request] automated change (#1764)
01b9268c25 is described below

commit 01b9268c2519dcc6e0f0020e01a0604263a494fd
Author: github-actions[bot] <41...@users.noreply.github.com>
AuthorDate: Thu Apr 16 06:13:52 2026 +0200

    [create-pull-request] automated change (#1764)
    
    Co-authored-by: oscerd <51...@users.noreply.github.com>
---
 .../generated/resources/connectors/camel-couchbase-sink-sink.json   | 6 ++++++
 .../src/generated/resources/connectors/camel-netty-http-sink.json   | 6 ++++++
 .../src/generated/resources/connectors/camel-netty-http-source.json | 6 ++++++
 .../src/generated/resources/connectors/camel-sjms2-sink.json        | 6 ++++++
 .../src/generated/resources/connectors/camel-sjms2-source.json      | 6 ++++++
 .../src/generated/resources/camel-couchbase-sink-sink.json          | 6 ++++++
 .../src/generated/resources/camel-netty-http-sink.json              | 6 ++++++
 .../src/generated/resources/camel-netty-http-source.json            | 6 ++++++
 .../kafkaconnector/nettyhttp/CamelNettyhttpSinkConnectorConfig.java | 4 ++++
 .../nettyhttp/CamelNettyhttpSourceConnectorConfig.java              | 4 ++++
 .../src/generated/resources/camel-sjms2-sink.json                   | 6 ++++++
 .../src/generated/resources/camel-sjms2-source.json                 | 6 ++++++
 .../camel/kafkaconnector/sjms2/CamelSjms2SinkConnectorConfig.java   | 4 ++++
 .../camel/kafkaconnector/sjms2/CamelSjms2SourceConnectorConfig.java | 4 ++++
 14 files changed, 76 insertions(+)

diff --git a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-couchbase-sink-sink.json b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-couchbase-sink-sink.json
index 27f7e22589..a03f1c8f40 100644
--- a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-couchbase-sink-sink.json
+++ b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-couchbase-sink-sink.json
@@ -53,6 +53,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.kamelet.couchbase-sink.connectionString": {
+			"name": "camel.kamelet.couchbase-sink.connectionString",
+			"description": "The full Couchbase SDK connection string (e.g. couchbase:\/\/host:port). When set, it takes precedence over hostname extraction for the KV service port.",
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.kamelet.couchbase-sink.autoStartId": {
 			"name": "camel.kamelet.couchbase-sink.autoStartId",
 			"description": "Auto Start Id or not",
diff --git a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-sink.json b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-sink.json
index 1ef7c92f68..39cbd6f0ce 100644
--- a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-sink.json
+++ b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-sink.json
@@ -324,6 +324,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.sink.endpoint.deserializationFilter": {
+			"name": "camel.sink.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application\/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservative default filter allowing java., javax. and org.apache.camel. packages  [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.sink.endpoint.enabledProtocols": {
 			"name": "camel.sink.endpoint.enabledProtocols",
 			"description": "Which protocols to enable when using SSL",
diff --git a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-source.json b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-source.json
index d5b56653f7..468472738e 100644
--- a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-source.json
+++ b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-netty-http-source.json
@@ -425,6 +425,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.source.endpoint.deserializationFilter": {
+			"name": "camel.source.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application\/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservative default filter allowing java., javax. and org.apache.camel. packages  [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.source.endpoint.enabledProtocols": {
 			"name": "camel.source.endpoint.enabledProtocols",
 			"description": "Which protocols to enable when using SSL",
diff --git a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-sink.json b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-sink.json
index ab1e179866..44826e6121 100644
--- a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-sink.json
+++ b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-sink.json
@@ -264,6 +264,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.sink.endpoint.deserializationFilter": {
+			"name": "camel.sink.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure the JMS provider's own deserialization filter and\/or the JVM-wide -Dj [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.sink.endpoint.transacted": {
 			"name": "camel.sink.endpoint.transacted",
 			"description": "Specifies whether to use transacted mode",
diff --git a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-source.json b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-source.json
index 9531144cab..32f80ecf01 100644
--- a/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-source.json
+++ b/camel-kafka-connector-catalog/src/generated/resources/connectors/camel-sjms2-source.json
@@ -267,6 +267,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.source.endpoint.deserializationFilter": {
+			"name": "camel.source.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure the JMS provider's own deserialization filter and\/or the JVM-wide -Dj [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.source.endpoint.transacted": {
 			"name": "camel.source.endpoint.transacted",
 			"description": "Specifies whether to use transacted mode",
diff --git a/connectors/camel-couchbase-sink-kafka-connector/src/generated/resources/camel-couchbase-sink-sink.json b/connectors/camel-couchbase-sink-kafka-connector/src/generated/resources/camel-couchbase-sink-sink.json
index 27f7e22589..a03f1c8f40 100644
--- a/connectors/camel-couchbase-sink-kafka-connector/src/generated/resources/camel-couchbase-sink-sink.json
+++ b/connectors/camel-couchbase-sink-kafka-connector/src/generated/resources/camel-couchbase-sink-sink.json
@@ -53,6 +53,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.kamelet.couchbase-sink.connectionString": {
+			"name": "camel.kamelet.couchbase-sink.connectionString",
+			"description": "The full Couchbase SDK connection string (e.g. couchbase:\/\/host:port). When set, it takes precedence over hostname extraction for the KV service port.",
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.kamelet.couchbase-sink.autoStartId": {
 			"name": "camel.kamelet.couchbase-sink.autoStartId",
 			"description": "Auto Start Id or not",
diff --git a/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-sink.json b/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-sink.json
index 1ef7c92f68..39cbd6f0ce 100644
--- a/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-sink.json
+++ b/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-sink.json
@@ -324,6 +324,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.sink.endpoint.deserializationFilter": {
+			"name": "camel.sink.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application\/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservative default filter allowing java., javax. and org.apache.camel. packages  [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.sink.endpoint.enabledProtocols": {
 			"name": "camel.sink.endpoint.enabledProtocols",
 			"description": "Which protocols to enable when using SSL",
diff --git a/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-source.json b/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-source.json
index d5b56653f7..468472738e 100644
--- a/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-source.json
+++ b/connectors/camel-netty-http-kafka-connector/src/generated/resources/camel-netty-http-source.json
@@ -425,6 +425,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.source.endpoint.deserializationFilter": {
+			"name": "camel.source.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application\/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservative default filter allowing java., javax. and org.apache.camel. packages  [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.source.endpoint.enabledProtocols": {
 			"name": "camel.source.endpoint.enabledProtocols",
 			"description": "Which protocols to enable when using SSL",
diff --git a/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSinkConnectorConfig.java b/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSinkConnectorConfig.java
index 2c8fcfc4e3..8054eafc65 100644
--- a/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSinkConnectorConfig.java
+++ b/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSinkConnectorConfig.java
@@ -167,6 +167,9 @@ public class CamelNettyhttpSinkConnectorConfig
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_CONF = "camel.sink.endpoint.encoders";
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_DOC = "A list of encoders to be used. You can use a String which have values separated by comma, and have the values be looked up in the Registry. Just remember to prefix the value with # so Camel knows it should lookup.";
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_DEFAULT = null;
+    public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_CONF = "camel.sink.endpoint.deserializationFilter";
+    public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DOC = "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservativ [...]
+    public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT = null;
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_CONF = "camel.sink.endpoint.enabledProtocols";
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DOC = "Which protocols to enable when using SSL";
     public static final String CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DEFAULT = "TLSv1.2,TLSv1.3";
@@ -440,6 +443,7 @@ public class CamelNettyhttpSinkConnectorConfig
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_WORKER_GROUP_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_WORKER_GROUP_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_WORKER_GROUP_DOC);
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_DECODERS_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_DECODERS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_DECODERS_DOC);
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_ENCODERS_DOC);
+        conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DOC);
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DOC);
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SINK_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_DOC);
         conf.define(CAMEL_SINK_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_CONF, ConfigDef.Type.STRING, CAMEL_SINK_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_DOC);
diff --git a/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSourceConnectorConfig.java b/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSourceConnectorConfig.java
index 0e68384cf5..93c9551eb6 100644
--- a/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSourceConnectorConfig.java
+++ b/connectors/camel-netty-http-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/nettyhttp/CamelNettyhttpSourceConnectorConfig.java
@@ -200,6 +200,9 @@ public class CamelNettyhttpSourceConnectorConfig
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_CONF = "camel.source.endpoint.encoders";
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_DOC = "A list of encoders to be used. You can use a String which have values separated by comma, and have the values be looked up in the Registry. Just remember to prefix the value with # so Camel knows it should lookup.";
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_DEFAULT = null;
+    public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_CONF = "camel.source.endpoint.deserializationFilter";
+    public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DOC = "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied when deserializing Java objects from HTTP responses with Content-Type application/x-java-serialized-object. This is used when transferException is enabled and the remote side returns a serialized exception. When not set, the filter configured via the JVM system property jdk.serialFilter is used when present; otherwise a conservat [...]
+    public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT = null;
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_CONF = "camel.source.endpoint.enabledProtocols";
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DOC = "Which protocols to enable when using SSL";
     public static final String CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DEFAULT = "TLSv1.2,TLSv1.3";
@@ -505,6 +508,7 @@ public class CamelNettyhttpSourceConnectorConfig
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_WORKER_GROUP_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_WORKER_GROUP_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_WORKER_GROUP_DOC);
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DECODERS_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DECODERS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DECODERS_DOC);
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENCODERS_DOC);
+        conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_DESERIALIZATION_FILTER_DOC);
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_ENABLED_PROTOCOLS_DOC);
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_HOSTNAME_VERIFICATION_DOC);
         conf.define(CAMEL_SOURCE_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_NETTYHTTP_ENDPOINT_KEY_STORE_FORMAT_DOC);
diff --git a/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-sink.json b/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-sink.json
index ab1e179866..44826e6121 100644
--- a/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-sink.json
+++ b/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-sink.json
@@ -264,6 +264,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.sink.endpoint.deserializationFilter": {
+			"name": "camel.sink.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure the JMS provider's own deserialization filter and\/or the JVM-wide -Dj [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.sink.endpoint.transacted": {
 			"name": "camel.sink.endpoint.transacted",
 			"description": "Specifies whether to use transacted mode",
diff --git a/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-source.json b/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-source.json
index 9531144cab..32f80ecf01 100644
--- a/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-source.json
+++ b/connectors/camel-sjms2-kafka-connector/src/generated/resources/camel-sjms2-source.json
@@ -267,6 +267,12 @@
 			"priority": "MEDIUM",
 			"required": "false"
 		},
+		"camel.source.endpoint.deserializationFilter": {
+			"name": "camel.source.endpoint.deserializationFilter",
+			"description": "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure the JMS provider's own deserialization filter and\/or the JVM-wide -Dj [...]
+			"priority": "MEDIUM",
+			"required": "false"
+		},
 		"camel.source.endpoint.transacted": {
 			"name": "camel.source.endpoint.transacted",
 			"description": "Specifies whether to use transacted mode",
diff --git a/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SinkConnectorConfig.java b/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SinkConnectorConfig.java
index de19e1d68d..2012536fa7 100644
--- a/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SinkConnectorConfig.java
+++ b/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SinkConnectorConfig.java
@@ -123,6 +123,9 @@ public class CamelSjms2SinkConnectorConfig extends CamelSinkConnectorConfig {
     public static final String CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_CONF = "camel.sink.endpoint.transferException";
     public static final String CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DOC = "If enabled and you are using Request Reply messaging (InOut) and an Exchange failed on the consumer side, then the caused Exception will be send back in response as a jakarta.jms.ObjectMessage. If the client is Camel, the returned Exception is rethrown. This allows you to use Camel JMS as a bridge in your routing - for example, using persistent queues to enable robust routing. Notice that if you also have  [...]
     public static final Boolean CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DEFAULT = false;
+    public static final String CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_CONF = "camel.sink.endpoint.deserializationFilter";
+    public static final String CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DOC = "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure th [...]
+    public static final String CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT = null;
     public static final String CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_CONF = "camel.sink.endpoint.transacted";
     public static final String CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_DOC = "Specifies whether to use transacted mode";
     public static final Boolean CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_DEFAULT = false;
@@ -205,6 +208,7 @@ public class CamelSjms2SinkConnectorConfig extends CamelSinkConnectorConfig {
         conf.define(CAMEL_SINK_SJMS2_ENDPOINT_RECOVERY_INTERVAL_CONF, ConfigDef.Type.LONG, CAMEL_SINK_SJMS2_ENDPOINT_RECOVERY_INTERVAL_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_ENDPOINT_RECOVERY_INTERVAL_DOC);
         conf.define(CAMEL_SINK_SJMS2_ENDPOINT_SYNCHRONOUS_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SINK_SJMS2_ENDPOINT_SYNCHRONOUS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_ENDPOINT_SYNCHRONOUS_DOC);
         conf.define(CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DOC);
+        conf.define(CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_CONF, ConfigDef.Type.STRING, CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DOC);
         conf.define(CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_ENDPOINT_TRANSACTED_DOC);
         conf.define(CAMEL_SINK_SJMS2_COMPONENT_CONNECTION_FACTORY_CONF, ConfigDef.Type.STRING, CAMEL_SINK_SJMS2_COMPONENT_CONNECTION_FACTORY_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_COMPONENT_CONNECTION_FACTORY_DOC);
         conf.define(CAMEL_SINK_SJMS2_COMPONENT_LAZY_START_PRODUCER_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SINK_SJMS2_COMPONENT_LAZY_START_PRODUCER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SINK_SJMS2_COMPONENT_LAZY_START_PRODUCER_DOC);
diff --git a/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SourceConnectorConfig.java b/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SourceConnectorConfig.java
index c765181637..1c9803f1c1 100644
--- a/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SourceConnectorConfig.java
+++ b/connectors/camel-sjms2-kafka-connector/src/main/java/org/apache/camel/kafkaconnector/sjms2/CamelSjms2SourceConnectorConfig.java
@@ -134,6 +134,9 @@ public class CamelSjms2SourceConnectorConfig
     public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_CONF = "camel.source.endpoint.transferException";
     public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DOC = "If enabled and you are using Request Reply messaging (InOut) and an Exchange failed on the consumer side, then the caused Exception will be send back in response as a jakarta.jms.ObjectMessage. If the client is Camel, the returned Exception is rethrown. This allows you to use Camel JMS as a bridge in your routing - for example, using persistent queues to enable robust routing. Notice that if you also hav [...]
     public static final Boolean CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DEFAULT = false;
+    public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_CONF = "camel.source.endpoint.deserializationFilter";
+    public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DOC = "Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the class of the body returned by jakarta.jms.ObjectMessage.getObject(). The pattern is evaluated after the JMS provider has deserialized the payload, so this option alone does not prevent gadget-chain execution that happens inside the provider's ObjectInputStream; to block such attacks, also configure  [...]
+    public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT = null;
     public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_CONF = "camel.source.endpoint.transacted";
     public static final String CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_DOC = "Specifies whether to use transacted mode";
     public static final Boolean CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_DEFAULT = false;
@@ -219,6 +222,7 @@ public class CamelSjms2SourceConnectorConfig
         conf.define(CAMEL_SOURCE_SJMS2_ENDPOINT_RECOVERY_INTERVAL_CONF, ConfigDef.Type.LONG, CAMEL_SOURCE_SJMS2_ENDPOINT_RECOVERY_INTERVAL_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_ENDPOINT_RECOVERY_INTERVAL_DOC);
         conf.define(CAMEL_SOURCE_SJMS2_ENDPOINT_SYNCHRONOUS_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SOURCE_SJMS2_ENDPOINT_SYNCHRONOUS_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_ENDPOINT_SYNCHRONOUS_DOC);
         conf.define(CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSFER_EXCEPTION_DOC);
+        conf.define(CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_ENDPOINT_DESERIALIZATION_FILTER_DOC);
         conf.define(CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_ENDPOINT_TRANSACTED_DOC);
         conf.define(CAMEL_SOURCE_SJMS2_COMPONENT_CONNECTION_FACTORY_CONF, ConfigDef.Type.STRING, CAMEL_SOURCE_SJMS2_COMPONENT_CONNECTION_FACTORY_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_COMPONENT_CONNECTION_FACTORY_DOC);
         conf.define(CAMEL_SOURCE_SJMS2_COMPONENT_BRIDGE_ERROR_HANDLER_CONF, ConfigDef.Type.BOOLEAN, CAMEL_SOURCE_SJMS2_COMPONENT_BRIDGE_ERROR_HANDLER_DEFAULT, ConfigDef.Importance.MEDIUM, CAMEL_SOURCE_SJMS2_COMPONENT_BRIDGE_ERROR_HANDLER_DOC);