Laravel has disclosed a critical authentication bypass in its built-in token API guard that lets unauthenticated attackers ...