github.com/biscuit-auth/biscuit-go

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2022-31053

Signature forgery in Biscuit

Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to creat…

biscuit-auth biscuit biscuit-haskell biscuit-auth Maven Go crates.io Hackage

Jun 13, 2022