Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-88819

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Eclipse Data Plane Core

Default version status: unaffected

  • a6f7d4cc0093931287c349e1e546ad2932c08e8d to < 882fe22db42bc67abfd0304c4cdb141b762c35d1affected
  • 0.1.0 to ≤ 0.1.3affected

References