Github.Com Biscuit-Auth Biscuit-Go vulnerabilities

1 known vulnerability affecting github.com/biscuit-auth_biscuit-go.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-31053CRITICAL≥ 0, < 2.0.02022-06-17

CVE-2022-31053 [CRITICAL] CWE-347 Signature forgery in Biscuit Signature forgery in Biscuit ### Impact The paper [Cryptanalysis of Aggregate Γ-Signature and Practical Countermeasures in Application to Bitcoin](https://eprint.iacr.org/2020/1484) defines a way to forge valid Γ-signatures, an algorithm that is used in the Biscuit specification version 1. It would allow an attacker to create a token with any access level. As Biscuit v1 was still an early version and not broadly deployed, we were