CVE-2024-40636
4 advisories.
NuGet/Steeltoe.Discovery.Eureka CVE-2024-40636: low 2.5
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: Upgrade Steeltoe.Discovery.Eureka to 3.2.8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.8 | - |
Fixed versions
| 3.2.8 |
Sources
- osv: GHSA-vmcp-66r5-3pcp
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON
NuGet/Steeltoe.Discovery.EurekaBase CVE-2024-40636: low 2.5
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vmcp-66r5-3pcp#NuGet/Steeltoe.Discovery.EurekaBase
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON
NuGet/Steeltoe.Discovery.ClientCore CVE-2024-40636: low 2.5
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vmcp-66r5-3pcp#NuGet/Steeltoe.Discovery.ClientCore
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON
NuGet/Steeltoe.Discovery.ClientAutofac CVE-2024-40636: low 2.5
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vmcp-66r5-3pcp#NuGet/Steeltoe.Discovery.ClientAutofac
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp
- https://nvd.nist.gov/vuln/detail/CVE-2024-40636
- https://github.com/SteeltoeOSS/Steeltoe/commit/c5d4a94e90ccb77f8e851bc681a2e348a95e7ecb
- https://github.com/SteeltoeOSS/security-advisories
CVE-2024-40636 · published · modified · JSON