{"action":"Upgrade com.clever-cloud:biscuit-java to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"com.clever-cloud:biscuit-java","cve_ids":["CVE-2022-31053"],"ecosystem":"Maven","epss":0.0101,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-75rw-34q6-72cr","id":"tcs_01M5N8HH9TZBQJ8XPW643JHVJ7","modified_at":"2026-02-04T04:12:23.445350Z","published_at":"2022-06-17T00:38:03Z","references":["https://osv.dev/vulnerability/GHSA-75rw-34q6-72cr","https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-75rw-34q6-72cr","https://nvd.nist.gov/vuln/detail/CVE-2022-31053","https://eprint.iacr.org/2020/1484","https://github.com/advisories/GHSA-75rw-34q6-72cr","https://github.com/biscuit-auth/biscuit","https://pkg.go.dev/vuln/GO-2022-0564"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-75rw-34q6-72cr#Maven/com.clever-cloud:biscuit-java","url":"https://osv.dev/vulnerability/GHSA-75rw-34q6-72cr"}],"summary":"Signature forgery in Biscuit"}