CVE-2026-88819

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID...