VYPR

Maven package

com.clever-cloud/biscuit-java

pkg:maven/com.clever-cloud/biscuit-java

Vulnerabilities (1)

  • CVE-2022-31053Jun 13, 2022
    affected < 2.0.0fixed 2.0.0

    Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any ac