Skip to content
OpenAdvisories

Product · biscuit-auth

biscuit-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.0
    CVE-2024-41948

    biscuit-java vulnerable to public key confusion in third party block

    biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock re…

    biscuit-auth biscuit-java org.biscuitsec:biscuit Maven