steeltoe.management.endpointcore
NuGet · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords | steeltoe.management.endpointsteeltoe.management.endpointcore | NuGet | High | Fix reported | |
| Steeltoe vulnerable to management-port isolation bypass via spoofed Host header | steeltoe.management.endpointsteeltoe.management.endpointcore | NuGet | High | Fix reported |