Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
External References:
http://camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc
Upstream bug:
https://issues.apache.org/jira/browse/CAMEL-10575