Scitokens Cpp Library vulnerabilities

2 known vulnerabilities in Scitokens Cpp Library from Scitokens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  scitokens-cpp: Incorrect Authorization

  CVE-2026-32726Mar 31, 2026Scitokens

  SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking

• 8.3 High severity

  scitokens-cpp: Relative Path Traversal

  CVE-2026-32725Mar 31, 2026Scitokens

  SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token