scitokens vulnerabilities (PyPI)

3 vulnerabilities.

• scitokens PyPI SciTokens: Authorization Bypass via Path Traversal in Scope Validation CVE-2026-32727 Fix available 8.1 HighMarch 31, 2026
• scitokens PyPI SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking CVE-2026-32716 Fix available 8.1 HighMarch 31, 2026
• scitokens PyPI SciTokens vulnerable to SQL Injection in KeyCache CVE-2026-32714 Fix available 9.8 CriticalMarch 31, 2026