CVE-2026-95663

Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.16.0 before 4.18.5, from 4.19.0 before 4.22.2. When token introspection is enabled on the camel-keycloak KeycloakSecurityPolicy useTokenIntrospection=true, the security...

CVE-2026-95663

The Apache Camel Keycloak component (versions 4.16.0 before 4.18.5, and 4.19.0 before 4.22.2) contains an Insufficient Session Expiration vulnerability (CWE-613) when useTokenIntrospection=true is enabled. The root cause is that both ConcurrentMapTokenCache and CaffeineTokenCache expire entries b...

EUVD-2026-109670

Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.16.0 before 4.18.5, from 4.19.0 before 4.22.2. When token introspection is enabled on the camel-keycloak KeycloakSecurityPolicy useTokenIntrospection=true, the security...