scitokens

Products

ProductCVEsExploitedLatest
scitokens3–Mar 31, 2026
scitokens-cpp2–Mar 31, 2026

Exploited and recent CVEs

  • CVE-2026-32725 High 8.3 SciTokens C++: Relative Path Traversal Vulnerability 0.8%
  • CVE-2026-32726 High 8.1 SciTokens C++: Sibling-Path Authorization Bypass 0.3%
  • CVE-2026-32727 High 8.1 SciTokens: Authorization Bypass via Path Traversal in Scope Validation 0.5%
  • CVE-2026-32716 High 8.1 SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking 0.4%
  • CVE-2026-32714 Critical 9.8 SciTokens vulnerable to SQL Injection in KeyCache 0.5%