🚨 CVE-2025-59685
Kazaar 1.25.12 allows a JWT with none in the alg field.