Low severity1.9NVD Advisory· Published Jun 17, 2026· Updated Jun 22, 2026
CVE-2026-50268
CVE-2026-50268
Description
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1.0, configuring encrypt:rsa:algorithm=OAEP does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the OAEP setting selects PKCS#1 v1.5, which is the same algorithm as the DEFAULT setting. Steeltoe.Configuration.Encryption version 4.2.0 patches the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Steeltoe.Configuration.EncryptionNuGet | >= 4.0.0, < 4.2.0 | 4.2.0 |
Affected products
2- Range: 4.0.0 - 4.1.0
- Range: 4.0.0 - 4.1.0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.