Eclipse Foundation Eclipse Data Plane Core

• CVE-2026-88819 Medium 6.3 In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID. 0.2%