{"action":"Upgrade org.apache.camel:camel-keycloak to 4.18.3 (4.18.x) or 4.21.0 (4.21.x) or later.","affected":[{"fixed":"4.18.3","introduced":"4.15.0"},{"fixed":"4.21.0","introduced":"4.19.0"}],"component":"org.apache.camel:camel-keycloak","cve_ids":["CVE-2026-53913"],"ecosystem":"Maven","epss":0.01085,"exploited":false,"fixed_versions":["4.18.3","4.21.0"],"ghsa_id":"GHSA-qvc3-6q9x-95pj","id":"tcs_01M5N9A9HN8KHCW3NSJZ2MKK26","modified_at":"2026-07-24T17:11:53.043385Z","published_at":"2026-07-06T09:30:30Z","references":["https://osv.dev/vulnerability/GHSA-qvc3-6q9x-95pj","https://nvd.nist.gov/vuln/detail/CVE-2026-53913","https://github.com/apache/camel/commit/1477cb4e87b2c301f1cdcddca5b153fbbef6934b","https://camel.apache.org/security/CVE-2026-53913.html","https://github.com/apache/camel","https://issues.apache.org/jira/browse/CAMEL-23738"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qvc3-6q9x-95pj","url":"https://osv.dev/vulnerability/GHSA-qvc3-6q9x-95pj"}],"summary":"Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities"}