medium6.3
CVE-2026-88819
In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
Impact
In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.