MEDIUM6.5PyPI
PYSEC-2026-2276· CVE-2026-32716, GHSA-w8fp-g9rh-34jhModified: 7/13/2026
package
PyPI/scitokens
pkg:pypi/scitokens
MEDIUM6.5PyPI
PYSEC-2026-2277· CVE-2026-32727, GHSA-3x2w-63fp-3qvwModified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-530· CVE-2026-32714, GHSA-rh5m-2482-966cSciTokens is vulnerable to SQL Injection in KeyCache
Modified: 7/1/2026
HIGH8.1PyPI
GHSA-3x2w-63fp-3qvw· CVE-2026-32727, PYSEC-2026-2277SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-rh5m-2482-966c· CVE-2026-32714, PYSEC-2026-530SciTokens is vulnerable to SQL Injection in KeyCache
Modified: 6/29/2026
HIGH8.1PyPI
GHSA-w8fp-g9rh-34jh· CVE-2026-32716, PYSEC-2026-2276SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
Modified: 7/13/2026