PT-2026-20652

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.15.0 through 4.17.9 Description The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This allows a token issued by one Keycloak realm to be silentl...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +77 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (>=26.0.0, <=26.1.2)

org.keycloak:keycloak-services MAVEN version =26.0.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =2.0.0-26.0, =1.1.1-26.0, =0.5.42, =0.6.1 - io.github.jeff-tian:keycloak-sms-provider-aliyun 2.4.1 - io.github.jeff-tian:keycloak-sms-provider-aws-sns 2.4.1 - io.github.jeff-tian:keycloak-sms-provider-bulksms...