Duende vulnerabilities

Products

• Identityserver 2

Newest

• duende identityserver4 Duende IdentityServer4 Token Renewal Endpoint authorize improper authentication CVE-2026-4349 6.3 MediumMarch 17, 2026
• duende identityserver Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs CVE-2024-49755 Fix available 3.1 LowOctober 28, 2024
• duende identityserver Duende IdentityServer Open Redirect vulnerability CVE-2024-39694 Fix available 4.7 MediumJuly 31, 2024