NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#session-expiration

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedaccess-control1 access-tokens1 apache-answer1 apache-camel1 camel-keycloak1 cve-2026-796241 keycloak1 oss-security1 private-uploads1

2 stories, newest first · one card per story

oss-security7d ago

Camel Keycloak accepts expired tokens from unbounded cache (CVE-2026-95663)

Cached introspection results are not limited by token expiry, so expired access tokens can still be accepted.

2 sources apache-camel camel-keycloak

oss-security15d ago

CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation

Revoked Apache Answer sessions kept access to private uploads via stale visit tokens through 2.0.2.

8 sources apache-answer cve-2026-79624

1