Steeltoe.Management.Endpoint vulnerabilities (NuGet)

4 vulnerabilities.

• Steeltoe.Management.Endpoint NuGet Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets CVE-2026-75523 Fix available 5.9 MediumSeptember 17, 2026
• Steeltoe.Management.Endpoint NuGet Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission CVE-2026-50201 Fix available 6.5 MediumJune 17, 2026
• Steeltoe.Management.Endpoint NuGet Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords CVE-2026-50200 Fix available 7.5 HighJune 17, 2026
• Steeltoe.Management.Endpoint NuGet Steeltoe vulnerable to management-port isolation bypass via spoofed Host header CVE-2026-50194 Fix available 8.2 HighJune 17, 2026