biscuit-auth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

biscuit-auth records in CISA KEV

No biscuit-auth vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Biscuit-java · all components

TI-2024-27970 CVE-2024-41948 · GHSA-5hcj-rwm6-xmw4

LOW 23

biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00283 Published 2024-08-01 Fixed in 4.0.0 CWE-1259