The Data Protection API secures critical elements such as auth cookies, session state, and OIDC state across ASP.NET Core applications. Exploitation could let attackers assume privileged identities ...