Skip to content
OpenAdvisories

Product · biscuit-auth

biscuit

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.0

    Public key confusion in third party block in Biscuit

    Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language. Third-party blocks can be generated without transferring the whole token to the third-party authority. Ins…