Priority LOW 15
Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language.
Vulnerabilities
4 records
TI-2024-27970 CVE-2024-41948 · GHSA-5hcj-rwm6-xmw4
biscuit-java vulnerable to public key confusion in third party block
Priority LOW 23
biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures.
TI-2024-27971 CVE-2024-41949 · GHSA-p9w4-585h-g3c7
biscuit-rust vulnerable to public key confusion in third party block
Priority LOW 28
biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures.
TI-2022-13098 CVE-2022-31053 · GHSA-75rw-34q6-72cr
Signature forgery in Biscuit
Priority HIGH 82
Biscuit is an authentication and authorization token for microservices architectures.