Security
فارسی
All products

corewcf.primitives

NuGet · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CoreWCF: SAML token replay protection is inoperativeCVE-2026-54779 · GHSA-9JR3-RJ99-8JQ3 corewcf.primitives NuGet Medium Fix reported
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificateCVE-2026-54774 · GHSA-RPJ7-HR7H-W6P9 corewcf.primitives NuGet High Fix reported
CoreWCF: WS-Security signature substitution via document-wide Signature lookupCVE-2026-54773 · GHSA-JC6X-RJ79-W4MX corewcf.primitives NuGet Medium Fix reported
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentialityCVE-2026-54784 · GHSA-2288-8H3R-CQGG corewcf.primitives NuGet High Fix reported
CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messagesCVE-2026-54783 · GHSA-GQV6-PWCG-87R8 corewcf.primitives NuGet High Fix reported
CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforcedCVE-2026-54781 · GHSA-48PQ-2XQ3-C2M4 corewcf.primitives NuGet High Fix reported
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite BypassCVE-2026-54780 · GHSA-4V55-CPMV-3VCM corewcf.primitives NuGet Low Fix reported
CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validationCVE-2026-54782 · GHSA-XJR9-GG9Q-JX3V corewcf.primitives NuGet Critical Fix reported