CVE-2022-31053

CVE-2022-31053 involves Biscuit tokens where the v1 specification contains a vulnerable algorithm that allows forging valid Γ-signatures, enabling a token with any access level. The vulnerability does not affect Biscuit v2, which uses a different algorithm. Red Hat and OSV entries corroborate the...

PT-2022-20491

Name of the Vulnerable Software and Affected Versions Biscuit versions 1 Description The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. This would allow an attacker to create a token with any access level. The version 2 of...

Biscuit 数据伪造问题漏洞

Biscuit is delegated, decentralized, capability-based authorization tokens. A data forgery issue vulnerability exists in the v1 version of Biscuit that stems from allowing an attacker to create tokens with any access level...

af-core (>=0.1.0, <=0.1.8), af-lib (0.1.1) +49 more potentially affected by CVE-2021-1000007 +1 more via parse_duration (2.1.1)

parseduration CARGO version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on parseduration and may be impacted: - af-core =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.2, =0.6.2, =0.6.2, =0.1.0, =0.3.12, =0.1.0, =0.1.0, =1.0.0-alpha.3, =1.0.0-alpha.4 and...