IETF RFC 7523

• CVE-2025-27371 Medium 6.9 In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to au 0.3%