Executive brief
SciTokens is vulnerable to SQL Injection in KeyCache
Affected products
- PyPI scitokens
Junglewise Threat Intelligence
CVE-2026-32714: PYSEC-2026-530 - SciTokens is vulnerable to SQL Injection in KeyCache
CVE-2026-32714 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: scitokens (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2277 - SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.7, the Enforcer is vulnerable to a path traversal
- PYSEC-2026-2276 - SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the Enforcer incorrectly validates scope paths