← All credits

Lidor Ben Shitrit from Novee Security

1 vulnerability record and advisories credit this contributor.

CVE-2026-53913
Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is accepted