CoreWCF.Primitives vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-54784HighCoreWCF.Primitives: CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality CVE-2026-54783HighCoreWCF.Primitives: CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages CVE-2026-54782CriticalCoreWCF.Primitives: CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation CVE-2026-54781HighCoreWCF.Primitives: CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced CVE-2026-54780LowCoreWCF.Primitives: CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass CVE-2026-54779MediumCoreWCF.Primitives: CoreWCF: SAML token replay protection is inoperative CVE-2026-54774HighCoreWCF.Primitives: CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate CVE-2026-54773MediumCoreWCF.Primitives: CoreWCF: WS-Security signature substitution via document-wide Signature lookup

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo