org.apache.camel:camel-keycloak vulnerabilities
CVEs whose affected-version data names the org.apache.camel:camel-keycloak package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-95663Medium· 4.8Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry
Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.16.0 before 4.18.5, from 4.19.0 before 4.22.2. When token introspection is enabled on the camel-keycloak Keyc…
▾ SunlitApache Software Foundation · org.apache.camel:camel-keycloakEPSS 0.24%via CVEORG
CVE-2026-85301Medium· 4.8PoCApache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim
Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1. The security processor validated the issuer of an introspected token on…
▾ TwilightApache Software Foundation · org.apache.camel:camel-keycloakEPSS 0.30%via CVEORG