DuendeSoftware IdentityServer

• CVE-2024-49755 Low 3.1 Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs 0.3%
• CVE-2024-39694 Medium 4.7 Duende IdentityServer Open Redirect vulnerability 0.5%