Ecosystem
Hackage
36 known vulnerabilities.
Most affected packages
git-annex 5
hackage-server 3
aeson 2
biscuit-haskell 2
x509-validation 2
base 2
cabal-install 2
scientific 2
xmonad-contrib 1
xml-conduit 1
tls-extra 1
toml-reader 1
hledger-web 1
pandoc 1
keter 1
bzlib 1
bz2 1
bzlib-conduit 1
process 1
cryptonite 1
crypton 1
xz-clib 1
spacecookie 1
x509-store 1
crypton-x509-store 1
cmark-gfm 1
Cabal 1
text-iso8601 1
crypton-x509-validation 1
crypton-x509 1
x509 1
jwt 1
warp 1
1 result · Clear filters · Feed
-
Low 3.0
biscuit-rust vulnerable to public key confusion in third party block
biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock re…