How many SteeltoeOSS steeltoe CVEs are in CISA KEV?

None of SteeltoeOSS steeltoe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of SteeltoeOSS steeltoe are affected?

40 distinct SteeltoeOSS steeltoe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SteeltoeOSS steeltoe CVEs?

SteeltoeOSS steeltoe's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management), CWE-312 (Cleartext Storage of Sensitive Information), CWE-327 (Use of a Broken or Risky Cryptographic Algorithm).

What is the average severity of SteeltoeOSS steeltoe CVEs?

The average CVSS base score across SteeltoeOSS steeltoe's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

SteeltoeOSS

7 CVEs

SteeltoeOSS steeltoe Vulnerabilities

Name: SteeltoeOSS steeltoe vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for steeltoe by SteeltoeOSS.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.0

Avg CVSS

2026–2026

Last updated June 17, 2026

Overview

SteeltoeOSS steeltoe has 7 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting SteeltoeOSS steeltoe, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of SteeltoeOSS steeltoe's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of SteeltoeOSS steeltoe's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No SteeltoeOSS steeltoe CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every SteeltoeOSS steeltoe version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

3.2.25 CVEs
3.2.35 CVEs
3.2.45 CVEs
3.2.55 CVEs
3.2.65 CVEs
3.2.75 CVEs
3.2.85 CVEs
3.3.05 CVEs
3.0.04 CVEs
3.0.0-m14 CVEs
3.0.0-m24 CVEs
3.0.0-m34 CVEs
3.0.0-rc14 CVEs
3.0.14 CVEs
3.0.24 CVEs
3.0.x_2021-Jan-124 CVEs
3.1.04 CVEs
3.1.0-rc14 CVEs
3.1.0-rc24 CVEs
3.1.14 CVEs
3.2.04 CVEs
3.2.0-rc14 CVEs
3.2.14 CVEs
4.0.04 CVEs
4.0.0-beta14 CVEs
4.0.0-rc14 CVEs
4.1.04 CVEs

Fixed in

2d4338d0fc3990a8df90968187d9567004d3fbe76 CVEs
70f147ad094c31ed5d1181592f02b3a2c439a8904 CVEs
04db2ace3b806bfe0260bb7d4bda340f241eff481 CVE
17b27b8be546ae3f83a2f6e91d45e0c84c5314b71 CVE
29ffc807093682330a3e35961d3e7b8c4049e4221 CVE
4cbc352fe89ac2e6c609554e435ab28996fec5e91 CVE
b39defa4db5f44f8696c456866b3a5b900d8d96b1 CVE
b7ca93c510aaa08d7e4ebec40ce20c5811c2c4b61 CVE
b8ed8557bb595863e4f340051d16b26ba40a75f41 CVE
bef9f14b710232fca3fbe87e48fdd1b9e6b60d431 CVE
c34a7399e808d0d11dd977460e81df1f2722df281 CVE

Find a version

7 CVEs

Sort

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
CVE-2026-50268
Patch
CWE-327
Low · CVSS 1.9
EPSS 0.0% (0th pct)2026-06-17
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
CVE-2026-50267
Patch
CWE-312
Medium · CVSS 4.7
EPSS 0.1% (0th pct)2026-06-17
Steeltoe's static JWKS cache shared across schemes and never invalidated
CVE-2026-50202
Patch
CWE-668
Medium · CVSS 5.9
EPSS 0.3% (21th pct)2026-06-17
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
CVE-2026-50201
Patch
CWE-269
Medium · CVSS 6.5
EPSS 0.2% (14th pct)2026-06-17
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
CVE-2026-50200
Patch
CWE-200
High · CVSS 7.5
EPSS 0.2% (8th pct)2026-06-17
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
CVE-2026-50196
Patch
CWE-400
High · CVSS 7.5
EPSS 0.3% (26th pct)2026-06-17
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
CVE-2026-50194
Patch
CWE-639
High · CVSS 8.2
EPSS 0.2% (15th pct)2026-06-17

Common weakness types

The CWE weakness categories most often found in SteeltoeOSS steeltoe CVEs. Follow any weakness for its full explanation.

Other SteeltoeOSS products

Browse vulnerabilities for other products by SteeltoeOSS.

Steeltoe.Management.Endpoint3 CVEs Steeltoe.Discovery.Eureka2 CVEs Steeltoe.Management.EndpointCore2 CVEs discovery1 CVEs security-advisories1 CVEs Steeltoe.Configuration.Abstractions1 CVEs Steeltoe.Configuration.Encryption1 CVEs Steeltoe.Discovery.ClientAutofac1 CVEs

All SteeltoeOSS vulnerabilities

Frequently asked questions

Common questions about SteeltoeOSS steeltoe vulnerabilities.

How many CVEs does SteeltoeOSS steeltoe have?: SteeltoeOSS steeltoe has 7 published CVE records since 2026.
How many SteeltoeOSS steeltoe CVEs are in CISA KEV?: None of SteeltoeOSS steeltoe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for SteeltoeOSS steeltoe vulnerabilities?: No SteeltoeOSS steeltoe CVEs currently have a tracked public exploit in this dataset.
Which versions of SteeltoeOSS steeltoe are affected?: 40 distinct SteeltoeOSS steeltoe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SteeltoeOSS steeltoe CVEs?: SteeltoeOSS steeltoe's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management), CWE-312 (Cleartext Storage of Sensitive Information), CWE-327 (Use of a Broken or Risky Cryptographic Algorithm).
What is the average severity of SteeltoeOSS steeltoe CVEs?: The average CVSS base score across SteeltoeOSS steeltoe's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SteeltoeOSS steeltoe vulnerabilities

Monitor new SteeltoeOSS steeltoe vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

da6c604decd992f61aeef763f5814102dcb088c71 CVE

e50cd31a429b191841120f0d38fa9dda8f751b0a1 CVE