Merge pull request #5490 from IdentityServer/josephdecock-patch-1

Update README.md
IdentityServer · Jul 31, 2024 · daa005e · daa005e
2 parents 4dc10e6 + 454e36b
commit daa005e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -1,3 +1,6 @@
+# Security Vulnerability Found
+IdentityServer4 contains a known Open Redirect vulnerability (CVE-2024-39694) that we do not intend to address. Please see [the security advisory](https://github.com/IdentityServer/IdentityServer4/security/advisories/GHSA-55p7-v223-x366) for more details and consider upgrading to [Duende.IdentityServer](www.duendesoftware.com).
+
 # Important update
 This project is not maintained anymore. This repo will be archived when .NET Core 3.1 end of support is reached (13th Dec 2022). All new development is happening in the new [Duende Software](https://github.com/duendesoftware) organization.