CVE-2026-94386

The Apache Camel OAuth component (versions 4.19.0 to before 4.22.2) is vulnerable to a Use of Cache Containing Sensitive Information (CWE-524) flaw. The OAuthClientCredentialsTokenResolver utilizes a static, JVM-global cache for OAuth 2.0 bearer tokens. Because the cache is keyed only by the toke...