Skip to content

Version 4.21.0

Latest
Latest

Choose a tag to compare

View all tags
@Revsgaard Revsgaard released this 15 Sep 13:56
4.21.0
aeb3c67
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

  • Updated System.Security.Cryptography.Xml to address security vulnerabilities, including CVE-2026-47304 and CVE-2026-50648:

    • .NET 10: 10.0.12.
    • .NET 9: 9.0.20.
    • .NET 8 and the MVC Core package's .NET Framework targets: 8.0.4.

    Thanks to @elhaard for the dependency updates in #289. Fixes #286.

  • Updated Microsoft.IdentityModel.Tokens.Saml to 8.22.0 for .NET 6, 7, 8, 9, 10 and .NET Standard 2.1 to address CVE-2026-50653, a denial-of-service vulnerability in SAML parsing. Fixes #288 via #290.

    Thanks to @heppth for reporting the vulnerability in #288.

  • Added EntitiesDescriptor.ToXElement() to generate group metadata as an XElement.

    Thanks to @TobiasMarklund for the contribution in #287.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

Contributors

elhaard, TobiasMarklund, and heppth
Assets 8
Loading