org.apache.camel:camel-keycloak
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted | org.apache.camel:camel-keycloak | Maven | Critical | Fix reported | |
| Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities | org.apache.camel:camel-keycloak | Maven | Critical | Fix reported | |
| Apache Camel: KeycloakSecurityPolicy does not validate issuer of JWT tokens against configured realm | org.apache.camel:camel-keycloak | Maven | Critical | Fix reported |