Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
openiddict/openiddict-core
dev @ 6d2f9eb
35
Fixes
0
CVEs
HIGH
Peak severity
16.1%
Coverage
Highlights
Auth Bypass: 28 prior fixes. Scrutinize any change in this area.
OpenIddict.Server: most-fixed (6 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Insecure handling of deserialized token payloads allowed raw reference token database payloads to be treated as validated tokens without verified reference ID checks. Developers must ensure that token type claims are strictly validated and that reference tokens undergo complete validation rather than falling back to default deserialization.
Token Injection: A validation bypass occurred when parsed tokens failed validation but did not trigger an immediate rejection, allowing processed requests to proceed. Direct rejection must be executed immediately upon any verification failure.
Auth Bypass: Using unvalidated token endpoint URIs instead of the validated issuer as the audience in client assertions enabled cross-provider impersonation attacks. Audiences must always be strictly validated against the trusted issuer.