Camel Keycloak accepts expired tokens from unbounded cache (CVE-2026-95663)
Cached introspection results are not limited by token expiry, so expired access tokens can still be accepted.
42
Cached introspection results are not limited by token expiry, so expired access tokens can still be accepted.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.3K readers · 2K views · 1.6K reads · all time 160K views