Duende.IdentityServer vulnerabilities (NuGet)

2 vulnerabilities.

• Duende.IdentityServer NuGet Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs CVE-2024-49755 Fix available 3.1 LowOctober 28, 2024
• Duende.IdentityServer NuGet Duende IdentityServer Open Redirect vulnerability CVE-2024-39694 Fix available 4.7 MediumJuly 31, 2024