Biscuit Auth

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-41949 Aug 01, 22:15 Cargo MEDIUM PATCH This Month

biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Biscuit Auth Biscuitsec

NVD GitHub

CVSS 3.1

6.4

EPSS

0.2%

CVE-2022-31053 Jun 13, 20:15 LIB CRITICAL POC PATCH Act Now

Biscuit is an authentication and authorization token for microservices architectures. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Java Information Disclosure Jwt Attack Biscuit Auth Biscuit Go +3

NVD GitHub

CVSS 3.1

9.8

EPSS

1.0%

CVE-2024-41949 Cargo

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

Privilege Escalation Biscuit Auth Biscuitsec

NVD GitHub

CVE-2022-31053 LIB

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Java Information Disclosure Jwt Attack +5

NVD GitHub