Critical vulnerabilities in JSON Web Token libraries