vulnerability in Steeltoe.Configuration.Encryption (CVE-2026-50268). Risk of unauthorized operations or information disclosure. Exploitable via ``OAEP``. Mitigation: upgrade to `4.2.0` or later.
vulnerability in Steeltoe.Configuration.Abstractions (CVE-2026-50267). Confidential information can be exposed externally. Exploitable via ``VCAP_SERVICES``. Mitigation: upgrade to `4.2.0` or later.
vulnerability in Steeltoe.Security.Authentication.JwtBearer (CVE-2026-50202). Confidential information can be exposed externally. Exploitable via ``TokenKeyResolver``. Mitigation: upgrade to `4.2.0` or later.
vulnerability in Steeltoe.Management.Endpoint (CVE-2026-50201). Confidential information can be exposed externally. Exploitable via ``EndpointPermissions.Restricted``. Mitigation: upgrade to `4.2.0` or later.