Skip to content
OpenAdvisories

Package · Debian

scitokens-cpp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.3
    CVE-2026-32725

    SciTokens C++: Relative Path Traversal Vulnerability

    SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token…

    scitokens scitokens-cpp scitokens-cpp scitokens-cpp Debian Ubuntu
  • High 8.1
    CVE-2026-32726

    SciTokens C++: Sibling-Path Authorization Bypass

    SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking…

    scitokens scitokens-cpp scitokens-cpp scitokens-cpp Debian Ubuntu