VYPR

Go modules package

github.com/biscuit-auth/biscuit-go

pkg:golang/github.com/biscuit-auth/biscuit-go

Vulnerabilities (1)

  • CVE-2022-31053Jun 13, 2022
    affected < 2.0.0fixed 2.0.0

    Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any ac