{"action":"Upgrade biscuit-auth to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"1.0.0"}],"component":"biscuit-auth","cve_ids":["CVE-2022-31053"],"ecosystem":"crates.io","epss":0.0101,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-75rw-34q6-72cr","id":"tcs_01M5KEV1CT5FECFNMP3RZVPFSW","modified_at":"2026-02-04T04:12:23.445350Z","published_at":"2022-06-17T00:38:03Z","references":["https://osv.dev/vulnerability/GHSA-75rw-34q6-72cr","https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-75rw-34q6-72cr","https://nvd.nist.gov/vuln/detail/CVE-2022-31053","https://eprint.iacr.org/2020/1484","https://github.com/advisories/GHSA-75rw-34q6-72cr","https://github.com/biscuit-auth/biscuit","https://pkg.go.dev/vuln/GO-2022-0564"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-75rw-34q6-72cr","url":"https://osv.dev/vulnerability/GHSA-75rw-34q6-72cr"}],"summary":"Signature forgery in Biscuit"}