Scitokens Library vulnerabilities

1 known vulnerability in Scitokens Library from Scitokens. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  scitokens: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32714Mar 31, 2026Scitokens

  SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection because it used Python's str.format() to construct SQL queries with user-supplied data (such as issuer