Eclipse Foundation Eclipse Lyo

• CVE-2026-18918 Critical 9.1 OAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default 0.5%