CVE-2026-92857

keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokens

keycloak-services

keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokens

5. Nov 2026

Ausgewertete Quellen

• Red Hat
  Red Hat