tag

Jwe

pac4j JWT Authentication Bypass via Unsigned Token in JWE Wrapper — CVE-2026-29000

CVE-2026-29000· pac4j (JWT authentication module), used in Java web applications unpatched