NuGet/Duende.AccessTokenManagement CVE-2025-26620: medium, EPSS 0.39%
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
Action: Upgrade Duende.AccessTokenManagement to 3.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-qxj7-2x7w-3mpp
- https://github.com/DuendeSoftware/foss/security/advisories/GHSA-qxj7-2x7w-3mpp
- https://nvd.nist.gov/vuln/detail/CVE-2025-26620
- https://github.com/DuendeSoftware/foss/commit/a33332ddec0ebf3c048ba85427e3c77d47c68dac
- https://github.com/DuendeSoftware/foss
CVE-2025-26620 · published · modified · JSON