Blog · 2 posts
#open-source
- Editorial · Nov 10, 2026Two open-source projects for the identity community: Awesome Identity and IAM Interview Questions
We published two community projects on GitHub. Awesome Identity is a curated, vendor-neutral list of more than 650 identity resources, from standards and open-source libraries to a vendor directory. IAM Interview Questions is a bank of over 240 questions with notes on what a strong answer shows. Both are free, openly licensed, and open to pull requests.
- News · Aug 24, 2026Keycloak password reset flaw let anyone skip the email token and take over any account
CVE-2026-18963 is improper state validation in Keycloak's reset-credentials flow. A crafted request jumped the authentication session straight to the password-update step, no verification token needed. CVSS 9.1, fixed in 26.7.2.