biscuit-auth
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| biscuit | 2 | – | Aug 5, 2024 |
| biscuit-java | 1 | – | Aug 1, 2024 |
| biscuit-rust | 1 | – | Aug 1, 2024 |
Exploited and recent CVEs
- CVE-2024-42350 Public key confusion in third party block in Biscuit 0.3%
- CVE-2024-41948 biscuit-java vulnerable to public key confusion in third party block 0.3%
- CVE-2024-41949 biscuit-rust vulnerable to public key confusion in third party block 0.2%
- CVE-2022-31053 Signature forgery in Biscuit 1.0%