6.3
Medium
CVE-2026-88819 In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID
Description
In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse Data Plane Core 0.1 | 0.1.0 → 0.1.3 | No fix stated |
References
- gitlab.eclipse.org gitlab.eclipse.org
Timeline
- Published
- Last modified