CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key

https://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key