#access-tokens

1 stories this week · 2 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

99% of repository access tokens never expire

BlueFlag report finds developer and AI agent permissions outlast projects, with 99% of tokens unexpired and non-human identities outnumbering humans 8:1.

3 min readdeveloper-risk access-tokens

oss-security19d ago

Camel Keycloak accepts expired tokens from unbounded cache (CVE-2026-95663)

Cached introspection results are not limited by token expiry, so expired access tokens can still be accepted.

2 sources apache-camel camel-keycloak

Dark ReadingSep 23, 2026high

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

GitLab user email addresses embed highly privileged tokens that could enable supply-chain attacks.

gitlab access-tokens

Stories tagged #access-tokens

99% of repository access tokens never expire

Camel Keycloak accepts expired tokens from unbounded cache (CVE-2026-95663)

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks