Steeltoe JWT Key Cache Not Isolated Across Schemes: CVE-2025-50202

github.com 2026-06-18查看中文 →

Security AdvisoryCVE-2025-50202HighSteeltoe

Affected:

Steeltoe.Security.Authentication.CloudFoundryBase <= 3.3.0
Steeltoe.Security.Authentication.JwtBearer <= 4.1.0
Steeltoe.Security.Authentication.OpenIdConnect <= 4.1.0

Fixed in:

3.4.0
4.2.0

Referenced CVEs: CVE-2026-50202 · 5.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Swoosh MsGraph Adapter URL Path Injection Vulnerability (CVE-2024-54833) 2026-07-06 Swoosh MS Graph Adapter Path Injection Vulnerability Patch 2026-07-06 libjpeg Fix for Multiple APPIJ IPTC Block Parsing Error 2026-07-06 CVE-2026-13705: Image-SGI Buffer Read Overflow Vulnerability and Fix 2026-07-06 Germedia gf_isom_media_in_malu_rewrite Double-Free Vulnerability Analysis 2026-07-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive