org.biscuitsec vulnerabilities

Products

• org.biscuitsec/biscuit 1

Latest org.biscuitsec CVEs

Newest publication first

1. CVE-2024-41948 biscuit-java vulnerable to public key confusion in third party block

   Published 2024-08-01

   Medium·CVSS 5.0 EPSS 0.28%

   biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, pr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.