DuendeSoftware IdentityServer vulnerabilities

2 published CVEs name DuendeSoftware IdentityServer among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 0Medium 1Low 1Not scored 0

Newest CVEs

CVE-2024-49755
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
DuendeSoftware · IdentityServer
Low3.1
CVE-2024-39694
Duende IdentityServer Open Redirect vulnerability
DuendeSoftware · IdentityServer
Medium4.7

Most common weaknesses