Biscuit Java

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-41948 Maven MEDIUM PATCH This Month

biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Java Information Disclosure Biscuit Java

NVD GitHub

CVSS 3.1

5.0

EPSS

0.3%

CVE-2022-31053 LIB CRITICAL POC PATCH Act Now

Biscuit is an authentication and authorization token for microservices architectures. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Jwt Attack Java Biscuit Auth Biscuit Go +2

NVD GitHub

CVSS 3.1

9.8

EPSS

1.0%

CVE-2024-41948 Maven

EPSS 0% CVSS 5.0

MEDIUM PATCH This Month

Java Information Disclosure Biscuit Java

NVD GitHub

CVE-2022-31053 LIB

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Information Disclosure Jwt Attack Java +4

NVD GitHub