CVE-2026-23993: JWT authentication bypass in HarbourJwt via "unknown alg" | Heykuki News