CoreWCF.Primitives
dotnet · CoreWCF.PrimitivesHeads-up
CoreWCF.Primitives: Unauthenticated Signature Bypass via Crafted SOAP Header
A security vulnerability in CoreWCF.
20 Jun 2026 · schedule it
dotnet · CoreWCF.PrimitivesHeads-up
CoreWCF.Primitives Token Replay Detection Bypass
A security advisory was published for CoreWCF.
20 Jun 2026 · schedule it
dotnet · CoreWCF.PrimitivesHeads-up
CoreWCF.Primitives: WS-Security 1.0 DigestMethod validation added
CoreWCF's WS-Security 1.0 receive pipeline now validates the DigestMethod of each ds:Reference against the configured SecurityAlgo
20 Jun 2026 · schedule it
dotnet · CoreWCF.PrimitivesCritical
CoreWCF.Primitives SAML Token Signature Verification Bypass
When a service validates SAML tokens using a non-X.
20 Jun 2026 · act now
dotnet · CoreWCF.PrimitivesCritical
CoreWCF.Primitives SAML 1.1 token validation bypass
Security advisory: SAML 1.1 token validation bypass in CoreWCF.Primitives. Two exploit shapes: holder-of-key downgrade (attacker c
20 Jun 2026 · act now
dotnet · CoreWCF.PrimitivesCritical
CoreWCF.Primitives SAML Impersonation Vulnerability
A security vulnerability in CoreWCF.
20 Jun 2026 · act now
dotnet · CoreWCF.PrimitivesCritical
CoreWCF.Primitives replay attack vulnerability in transport-security bindings
A security vulnerability in CoreWCF.
20 Jun 2026 · act now
dotnet · CoreWCF.PrimitivesCritical
CoreWCF.Primitives Security Vulnerability: Impersonation via TransportWithMessageCredential and WS-SecureConversation
A security vulnerability in CoreWCF.
20 Jun 2026 · act now