CVE-2026-82462: Nimbus Unverified Signed Jwt Claimscve-2026-82462-nimbus-unverified-signed-jwt-claims
JWT claims or payload were retrieved from a `SignedJWT` parsed with `SignedJWT.parse()` without first verifying the cryptographic signature with `verify()`. An attacker can forge or alter the token claims to bypass authentication or escalate privileges.