NuGet/Steeltoe.Discovery.Eureka CVE-2024-40636: low 2.5, EPSS 0.42%
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: Upgrade Steeltoe.Discovery.Eureka to 3.2.8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.8 | - |
Fixed versions
| 3.2.8 |
Sources
- osv: GHSA-vmcp-66r5-3pcp
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON