HIGH8.2NuGet
GHSA-58f6-6rj2-3v8r· CVE-2026-50194Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
Modified: 7/2/2026
package
pkg:nuget/Steeltoe.Management.EndpointCore
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
Modified: 7/2/2026
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
Modified: 7/2/2026