Vulnerabilities

TI-2026-25219 CVE-2026-32727 · GHSA-3x2w-63fp-3qvw

SciTokens: Authorization Bypass via Path Traversal in Scope Validation

HIGH 70

SciTokens is a reference library for generating and using SciTokens.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00525 Published 2026-03-31 Fixed in 1.9.7 CWE-22

TI-2026-25208 CVE-2026-32716 · GHSA-w8fp-g9rh-34jh

HIGH 70

SciTokens is a reference library for generating and using SciTokens.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00396 Published 2026-03-31 Fixed in 1.9.6 CWE-285

TI-2026-25206 CVE-2026-32714 · GHSA-rh5m-2482-966c

HIGH 82

SciTokens is a reference library for generating and using SciTokens.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00501 Published 2026-03-31 Fixed in 1.9.6 CWE-89