biscuit-auth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

biscuit-auth records in CISA KEV

No biscuit-auth vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Biscuit-auth · all components

TI-2022-13098 CVE-2022-31053 · GHSA-75rw-34q6-72cr

HIGH 82

Biscuit is an authentication and authorization token for microservices architectures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01026 Published 2022-06-13 Fixed in 2.0.0 CWE-347

TI-2024-27971 CVE-2024-41949 · GHSA-p9w4-585h-g3c7

LOW 28

biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00237 Published 2024-08-01 Fixed in 5.0.0 CWE-269