← CVE Intelligence

CVE-2026-88819

Eclipse Foundation / Eclipse Data Plane Core PUBLISHED

Description (CNA)

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.

Affected (CNA)

Vendor / productVersions
Eclipse Foundation / Eclipse Data Plane Coreaffected a6f7d4cc0093931287c349e1e546ad2932c08e8d before 882fe22db42bc67abfd0304c4cdb141b762c35d1; affected 0.1.0 through 0.1.3

CWE

CWE-290, CWE-345

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.