DuendeSoftware vulnerabilities
4 published CVEs name DuendeSoftware among the affected products.
- Published CVEs
- 4
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 3Low 1Not scored 0
CVEs per yearBy the year they were published
- 20243
- 20251
Newest CVEs
- CVE-2025-26620
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
DuendeSoftware · foss
Medium6.3 - CVE-2024-51987
HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect
DuendeSoftware · Duende.AccessTokenManagement
Medium5.4 - CVE-2024-49755
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
DuendeSoftware · IdentityServer
Low3.1 - CVE-2024-39694
Duende IdentityServer Open Redirect vulnerability
DuendeSoftware · IdentityServer
Medium4.7