Critical vulnerability in json web encryption
auth0.com