Package · NuGet

Duende.AccessTokenManagement.OpenIdConnect

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.4

CVE-2024-51987

HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect

Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients created by `AddUserAccessTokenHttpClient` may use a different user's access token after a token refresh occurs. This occurs …

DuendeSoftware Duende.AccessTokenManagement Duende.AccessTokenManagement.OpenIdConnect NuGet

Nov 7, 2024