Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

Vulnerability Report: GO-2022-0564

CVE-2022-31053, GHSA-75rw-34q6-72cr
Affects: github.com/biscuit-auth/biscuit-go
Published: Aug 15, 2022
Modified: Jun 12, 2023

An attacker can forge Biscuit v1 tokens with any access level. There is no known workaround for Biscuit v1. The Biscuit v2 specification avoids this vulnerability.

For detailed information about this vulnerability, visit https://github.com/advisories/GHSA-75rw-34q6-72cr.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Vulnerability Report: GO-2022-0564

Affected Packages

Aliases

References

Feedback