{"api_version":"v1","generated_at":"2026-10-07T19:00:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-biscuit-auth-biscuit-8481e89ec0ee","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/biscuit","name":"biscuit","next_cursor":null,"observations":[{"affected":"< 4","affected_versions_present":true,"cve_id":"CVE-2024-42350","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-42350","fixed":"4","last_modified":"2024-08-05T20:23:35.031Z","patch_url":"https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-rgqv-mwc3-c78m","primary_source":"","published":"2024-08-05T19:47:44.903Z"},{"affected":"biscuit-auth >= 1.0.0, < 2.0.0; biscuit-haskell = 0.1.1.0; com.clever-cloud.biscuit-java < 2.0.0; github.com/biscuit-auth/biscuit-go < 2.0","affected_versions_present":true,"cve_id":"CVE-2022-31053","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-31053","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-22T17:54:16.990Z","patch_url":"","primary_source":"","published":"2022-06-13T19:35:10.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"biscuit-auth"}}