PT-2026-51076 · Nuget · Corewcf.Primitives

Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2026-54779

OSV

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact

When enabling DetectReplayedTokens, a token can be replayed and will be detected despite it being reused.

Patches

Fixed in CoreWCF v1.8.1 and v1.9.1

Workarounds

Provide your own implementation of ITokenReplayCache with the correct behavior.

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-294

CWE-613

Identificadores relacionados

CVE-2026-54779

GHSA-9JR3-RJ99-8JQ3

Produtos afetados

Corewcf.Primitives

Referências · 3

• https://github.com/CoreWCF/CoreWCF · Nota
• https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-9jr3-rj99-8jq3 · Nota
• https://osv.dev/vulnerability/GHSA-9jr3-rj99-8jq3 · Aviso do Fabricante