NuGet/Steeltoe.Discovery.EurekaBase CVE-2024-40636: low 2.5, EPSS 0.42%
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vmcp-66r5-3pcp#NuGet/Steeltoe.Discovery.EurekaBase
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON