What’s Vulnerable › Products

scitokens vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your scitokens version is affected

Latest scitokens vulnerabilities

• CVE-2026-32727 — SciTokens: Authorization Bypass via Path Traversal in Scope Validation (CVSS 6.5)
• CVE-2026-32716 — SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking (CVSS 6.5)
• CVE-2026-32714 — SciTokens vulnerable to SQL Injection in KeyCache (CVSS 9.8)