CVE-2020-36255

IdentityModel (aka ScottBrady.IdentityModel) has a vulnerability in Branca handling before version 1.3.0 that lets an attacker modify and forge authentication tokens. Affected component is the Branca implementation within IdentityModel prior to 1.3.0. Impact, per sources, is authenticated tokens ...