oss-security·1d agoCVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token#apache-airflow#keycloak#cve-2026-96806CVE-2026-96806 4 sources1