Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectReplayedTokens is enabled, allowing a captured token to be reused. This issue is fixed in versions 1.8.1 and 1.9.1.
Published: 2026-07-08
Score: 5.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-9jr3-rj99-8jq3 CoreWCF: SAML token replay protection is inoperative
History

Wed, 08 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Corewcf
Corewcf corewcf
Vendors & Products Corewcf
Corewcf corewcf

Wed, 08 Jul 2026 22:30:00 +0000

Type Values Removed Values Added
Description CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectReplayedTokens is enabled, allowing a captured token to be reused. This issue is fixed in versions 1.8.1 and 1.9.1.
Title CoreWCF: SAML token replay protection is inoperative
Weaknesses CWE-294
CWE-613
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'}

Subscriptions

Corewcf Corewcf
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-08T22:07:46.453Z

Reserved: 2026-06-15T23:23:57.714Z

Link: CVE-2026-54779

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-08T23:30:10Z

Weaknesses
  • CWE-294

    Authentication Bypass by Capture-replay

  • CWE-613

    Insufficient Session Expiration