Scitokens Scitokens Library
3 CVEs affecting Scitokens Scitokens Library. Latest disclosed: 2026-03-31. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32714 | Critical | 9.8 | 2026-03-31 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection be… |
CVE-2026-32727 | High | 8.1 | 2026-03-31 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.7, the Enforcer is vulnerable to a path traversal attack where an att… |
CVE-2026-32716 | High | 8.1 | 2026-03-31 | SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the Enforcer incorrectly validates scope paths by using a simple p… |