Antonio-castellon Module-auth vulnerabilities

• antonio-castellon module-auth @acastellon/auth has an authentication bypass via spoofable headers in validateToken() CVE-2026-58399 Fix available 8.7 HighJune 18, 2026