Understanding the SD JWT JS Vulnerability: Tampered Disclosures Silently Dropped
A vulnerability in the `@sd-jwt/decode` library, identified as CVE-2026-62374, allows tampered disclosures to be silently dropped instead of rejected, leading to a reduced claim set and potential authorization bypass.