CRITICAL9.8crates.ioGoMaven
GHSA-75rw-34q6-72cr· CVE-2022-31053, GO-2022-0564Signature forgery in Biscuit
Modified: 2/4/2026
package
crates.io/biscuit-auth
pkg:crates.io/biscuit-auth
LOW3.0crates.io
GHSA-p9w4-585h-g3c7· CVE-2024-41949, CVE-2024-42350biscuit-auth vulnerable to public key confusion in third party block
Modified: 10/15/2025