What is CVE-2026-50268?

CVE-2026-50268 is a low-severity vulnerability in Steeltoeoss Steeltoe.configuration.encryption, classified under Plaintext Storage of a Password. CVSS score: 1.9/10. Published 2026-06-17.

How severe is CVE-2026-50268?

Low severity. CVSS v3 base score is 1.9 out of 10.

Vulnerability in Steeltoeoss Steeltoe.configuration.encryption

CVE-2026-50268

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1.0, configuring `encrypt:rsa:algorithm=OAEP` does not enable…

CVSS v3 metric

CVSS v3 base score 1.9 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Steeltoeoss Steeltoe.configuration.encryption — versions >= 4.0.0, < 4.2.0

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password
CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-50268?: CVE-2026-50268 is a low-severity vulnerability in Steeltoeoss Steeltoe.configuration.encryption, classified under Plaintext Storage of a Password. CVSS score: 1.9/10. Published 2026-06-17.
How severe is CVE-2026-50268?: Low severity. CVSS v3 base score is 1.9 out of 10.