CVE-2026-55982: Exposure of Sensitive Information to an Unauthorized Actor

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...