Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

SteeltoeOSS — Vulnerabilities & Security Advisories 8

Browse all 8 CVE security advisories affecting SteeltoeOSS. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Found 3 results / 8Clear Filters
Top products by SteeltoeOSS: Steeltoe.Management.Endpoint security-advisories Steeltoe.Discovery.Eureka Steeltoe.Configuration.Encryption Steeltoe.Configuration.Abstractions Steeltoe.Security.Authentication.CloudFoundryBase
CVE IDTitleCVSSSeverityPublished
CVE-2026-50201 Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission — Steeltoe.Management.EndpointCWE-269 6.5 Medium2026-06-17
CVE-2026-50200 Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords — Steeltoe.Management.EndpointCWE-200 7.5 High2026-06-17
CVE-2026-50194 Steeltoe vulnerable to management-port isolation bypass via spoofed Host header — Steeltoe.Management.EndpointCWE-288 8.2 High2026-06-17

This page lists every published CVE security advisory associated with SteeltoeOSS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.