[MEDIUM] CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

PKSA-7tp5-63ss-rycr CVE-2026-45069 GHSA-29fc-p6c4-24cg

Affected package: symfony/symfony

Affected version: >=6.3.0,<6.4.0|>=6.4.0,<6.4.40|>=7.4.0,<7.4.12|>=8.0.0,<8.0.12

Reported by:
GitHub, FriendsOfPHP/security-advisories