Vulnerability in Eclipse Foundation Data Plane Core

CVE-2026-88819

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.