Skip to content
OpenAdvisories

Product · digitalbazaar

zcap

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-31995

    zcap has incomplete expiration checks in capability chains.

    `@digitalbazaar/zcap` provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the `expires` property is n…

    digitalbazaar zcap @digitalbazaar/zcap npm