VYPR

Biscuit Haskell

by Biscuitsec

CVEs (1)

  • CVE-2022-31053CriJun 13, 2022
    risk 0.64cvss 9.8epss 0.01

    Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any…