Skip to content
OpenAdvisories

Vendor

scitokens

5 known vulnerabilities.

Products

scitokens 3 scitokens-cpp 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-32714

    SciTokens vulnerable to SQL Injection in KeyCache

    SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection because it used Python's str.format() to construct SQL queries with user-supplied data (such as issuer…

    scitokens scitokens scitokens PyPI