9f8f63ec17
Fixes four CVEs: - OIDC hash binding fail-open cryptographic verification - JWE RSA1_5 Bleichenbacher padding oracle - alg:none signature verification bypass - JWS JWK header injection signature verification bypass Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com> Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/beb47db2-da25-416a-8fb0-c1452a3b22a7