Skip to content
OpenAdvisories

Vendor

Duende

1 known vulnerabilities.

Products

IdentityServer4 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-4349

    Duende IdentityServer4 Token Renewal Endpoint authorize improper authentication

    A vulnerability was determined in Duende IdentityServer4 up to 4.1.2. The affected element is an unknown function of the file /connect/authorize of the component Token Renewal Endpoint. This manipulation of the argument id_token_hint causes improper authentic…

    Duende IdentityServer4