CVE-2020-36255: Identitymodel Project Identitymodel

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.

Affected products

• Identitymodel Project Identitymodel: before 1.3.0 (fixed in 1.3.0)

Published 2021-03-05. Last modified 2026-06-17.