An open API service providing security vulnerability metadata for many open source software ecosystems.

nuget

Steeltoe.Management.Endpoint

nuget

Steeltoe management endpoints, also known as actuators. Includes support for Cloud Foundry integration.

View on github.com · View on nuget.org

Security Advisories for Steeltoe.Management.Endpoint in nuget

Moderate
about 2 months ago

Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission GSA_kwCzR0hTQS0yMjdyLWptMmctN2NwNM4ABaF5

nuget Steeltoe.Management.EndpointBase, Steeltoe.Management.Endpoint
High
about 2 months ago

Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords GSA_kwCzR0hTQS1xNjJoLTM1NGctNXI4Nc4ABaF4

nuget Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
High
about 2 months ago

Steeltoe vulnerable to management-port isolation bypass via spoofed Host header GSA_kwCzR0hTQS01OGY2LTZyajItM3Y4cs4ABaF2

nuget Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint

Filter by Severity