SteeltoeOSS security-advisories vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20264

Newest CVEs

• CVE-2026-81515

  Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

  SteeltoeOSS · security-advisories

  High7.5
• CVE-2026-81516

  Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

  SteeltoeOSS · security-advisories

  High7.5
• CVE-2026-81868

  Steeltoe: Header-forwarded client cert lacks proof of private-key possession

  SteeltoeOSS · security-advisories

  Medium6.5
• CVE-2026-75523

  Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

  SteeltoeOSS · security-advisories

  Medium5.9
• CVE-2024-40636

  Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness

  SteeltoeOSS · security-advisories

  Medium5.3