Camel Keycloak accepts expired tokens from unbounded cache (CVE-2026-95663)
Cached introspection results are not limited by token expiry, so expired access tokens can still be accepted.
Stories per day · 30 days
1 stories, newest first · one card per story