Identityserver Identityserver4 vulnerabilities

• identityserver identityserver4 IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host... CVE-2019-12250 Disputed 6.1 MediumMay 21, 2019
• identityserver identityserver4 IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect... CVE-2018-8899 6.1 MediumMarch 22, 2018