NuGet/CoreWCF.Primitives

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

Modified: 6/19/2026

CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced

Modified: 6/19/2026

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

Modified: 6/19/2026

CoreWCF: SAML token replay protection is inoperative

Modified: 6/19/2026

CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages

Modified: 6/19/2026

CoreWCF: WS-Security signature substitution via document-wide Signature lookup

Modified: 6/19/2026

CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate

Modified: 6/19/2026

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

Modified: 6/19/2026