SteeltoeOSS security-advisories

• CVE-2026-81515 High 7.5 Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS) 0.6%
• CVE-2026-81516 High 7.5 Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS) 0.6%
• CVE-2026-81868 Medium 6.5 Steeltoe: Header-forwarded client cert lacks proof of private-key possession 0.2%
• CVE-2026-75523 Medium 5.9 Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets 0.4%
• CVE-2024-40636 Medium 5.3 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness 0.4%