NuGet/Steeltoe.Management.Endpoint CVE-2026-50200: high 7.5, EPSS 0.18%
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
Action: Upgrade Steeltoe.Management.Endpoint to 4.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-q62h-354g-5r85
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-q62h-354g-5r85
- https://nvd.nist.gov/vuln/detail/CVE-2026-50200
- https://github.com/SteeltoeOSS/Steeltoe/commit/bef9f14b710232fca3fbe87e48fdd1b9e6b60d43
- https://github.com/SteeltoeOSS/Steeltoe/commit/e50cd31a429b191841120f0d38fa9dda8f751b0a
- https://github.com/SteeltoeOSS/Steeltoe
CVE-2026-50200 · published · modified · JSON