alg-none 2 JWT Algorithm Confusion Leads to Privilege Escalation | Bomb Threat Jun 22, 2026 JWT alg:none Authentication Bypass to Admin Access | EverGreen May 10, 2026