6 matches found
CVE-2024-31995
@digitalbazaar/zcap provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the expires property is not properly checked against the current da...
CVE-2024-31995
@digitalbazaar/zcap provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the expires property is not properly checked against the current da...
CVE-2024-31995 zcap has incomplete expiration checks in capability chains.
@digitalbazaar/zcap provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the expires property is not properly checked against the current da...
@bedrock/did-io (>=7.0.0, <=10.1.0), @bedrock/edv-storage (>=14.0.0, <=15.2.0) +29 more potentially affected by CVE-2024-31995 via @digitalbazaar/zcap (>=7.2.2, <=8.0.0)
@digitalbazaar/zcap NPM version =7.2.2, =7.0.0, =14.0.0, =13.0.0, =7.0.0, =6.0.0, =16.0.0, =15.0.0, =5.1.0, =4.0.0, =1.0.0, =2.0.0, =15.0.0, =5.0.0, =2.0.0, =5.0.0, =7.0.0 and more Source cves: CVE-2024-31995 Source advisory: MEND:CVE-2024-31995...
CVE-2024-31995 zcap has incomplete expiration checks in capability chains.
@digitalbazaar/zcap provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the expires property is not properly checked against the current da...
CVE-2024-31995 zcap has incomplete expiration checks in capability chains.
@digitalbazaar/zcap provides JavaScript reference implementation for Authorization Capabilities. Prior to version 9.0.1, when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, the expires property is not properly checked against the current da...