Our AI code reviewer found a CVSS 10.0 authentication bypass in pac4j-JWT | Heykuki News