CVE-2026-42333: quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations

The generated authentication filter matches OpenAPI path templates too broadly when deciding whether to attach credentials. A security scheme configured for one operation can therefore be applied to a different same-method operation whose path only partially resembles the protected template, causing bearer tokens, API keys, or basic credentials to be sent to unintended endpoints.