Title	T	P	Status	Assignee	Milestone	Created	Updated
#2128: [Federation] The federation_trust_mark_endpoint requires a "sub" request parameter Federation	bug	critical	resolved			2024-03-06	2024-03-15
#2100: Federation Historical Keys Federation	bug	critical	resolved			2023-12-03	2024-01-26
#1777: VC Issuance is vulnerable to Unknown Key Share attacks Credential Issuance	bug	critical	resolved			2023-01-10	2023-09-01
#1040: Security Issue - Attacker may reuse MS to register new clients Federation	bug	critical	resolved	Roland Hedberg		2018-08-07	2020-10-01
#920: Attack identified against self-issued "sub" values Core	bug	critical	resolved	Michael Jones	Errata	2014-03-03	2014-08-01
#748: Messages 2.1.1.1 and 8.1 - MTI features for OpenID Request Object and Request File Messages	bug	critical	resolved	Michael Jones	Implementer's Draft	2013-02-04	2013-02-28
#703: Key publication needs to be reworked (x509_url and jwk_url) Messages	bug	critical	resolved	Brian Campbell	Implementer's Draft	2013-01-21	2013-02-28
#513: Basic 1.2, Messages 8.14, Discovery 3.1, 3.2 - Issuer Identifier can not contain a path component	bug	critical	resolved	John Bradley		2012-01-19	2012-03-22
#546: Basic 2.1 & 2.1.2 - Claims requested by profile scope not defined	bug	critical	resolved	Michael Jones		2012-02-15	2012-02-20
#463: Messages - xml2rfc syntax error	bug	critical	resolved	Nat Sakimura		2011-12-21	2011-12-21
#310: Basic and maybe Messages and Standard - Several problems with statement about UserInfo response not guaranteed to be about the Subject in the session	bug	critical	resolved	John Bradley		2011-11-17	2011-11-30
#343: Messages - Why is a refresh token needed if an authentication code is being used?	bug	critical	resolved	John Bradley		2011-11-20	2011-11-26
#339: Messages, Standard - Meaning of login_required, session_selection_required and approval_required errors unclear	bug	critical	resolved			2011-11-20	2011-11-21
#88: Messages - Define how it should be Encrypted	bug	critical	resolved	John Bradley		2011-09-13	2011-11-05