Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

SteeltoeOSS

SteeltoeOSS security-advisories vulnerabilities

5 published CVEs name SteeltoeOSS security-advisories among the affected products.

Newest CVEs

  • CVE-2026-81515

    Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

    SteeltoeOSS · security-advisories

    High7.5
  • CVE-2026-81516

    Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

    SteeltoeOSS · security-advisories

    High7.5
  • CVE-2026-81868

    Steeltoe: Header-forwarded client cert lacks proof of private-key possession

    SteeltoeOSS · security-advisories

    Medium6.5
  • CVE-2026-75523

    Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

    SteeltoeOSS · security-advisories

    Medium5.9
  • CVE-2024-40636

    Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness

    SteeltoeOSS · security-advisories

    Medium5.3