Duendesoftware Identityserver vulnerabilities

• duende identityserver Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs CVE-2024-49755 Fix available 3.1 LowOctober 28, 2024
• duende identityserver Duende IdentityServer Open Redirect vulnerability CVE-2024-39694 Fix available 4.7 MediumJuly 31, 2024