DuendeSoftware

2 Products 3 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 3 CVEs

Products

View all

IdentityServer

6 Versions 2 CVEs

Duende.AccessTokenManagement

1 Version 1 CVE

Recent CVEs

CVE-2024-51987 MEDIUM 7 months, 3 weeks ago

Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients created by `Ad…

CVE-2024-49755 LOW 8 months ago

Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. IdentityServer's local API authentication handler performs insuf…

CVE-2024-39694 MEDIUM 11 months ago

Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to craft malicious Urls that cert…