CVE-2026-50267
1 advisory.
NuGet/Steeltoe.Configuration.Abstractions CVE-2026-50267: medium 4.7
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
Action: Upgrade Steeltoe.Configuration.Abstractions to 4.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-rxrh-4j9h-xgg9
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-rxrh-4j9h-xgg9
- https://nvd.nist.gov/vuln/detail/CVE-2026-50267
- https://github.com/SteeltoeOSS/Steeltoe/commit/8dd97cc6c4b184121a4bd1f92f9ac16918433471
- https://github.com/SteeltoeOSS/security-advisories
CVE-2026-50267 · published · modified · JSON