CVE-2026-88819: Authentication Bypass by Spoofing

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID...