pkg:NuGet/CoreWCF.Primitives

All known vulnerabilities

• CRITICAL10.0CVE-2026-54782CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
  from 0, < 1.8.1
• HIGH7.4CVE-2026-54784CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
  >= 1.9.0, < 1.9.1
• HIGH7.4CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
  from 0, < 1.8.1
• HIGH7.4CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced
  from 0, < 1.8.1
• HIGH7.4CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
  from 0, < 1.8.1
• MEDIUM5.9CoreWCF: SAML token replay protection is inoperative
  from 0, < 1.8.1
• MEDIUM5.9CoreWCF: WS-Security signature substitution via document-wide Signature lookup
  from 0, < 1.8.1
• LOW3.7CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
  from 0, < 1.8.1