CVE-2026-82465: Pac4j Nimbus Jwt Unverified Claimscve-2026-82465-pac4j-nimbus-jwt-unverified-claims
Parsing a JWT using `SignedJWT.parse(...)` and extracting its claims via `getJWTClaimsSet()` without verifying its signature allows unauthenticated attackers to forge token claims and bypass security controls.
