https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:00:08.468748+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-50268 CVE-2026-50268 — Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding 2026-10-06T00:00:08.490760+00:00

Affected: SteeltoeOSS Steeltoe.Configuration.Encryption

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1.0, configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the `OAEP` setting selects PKCS#1 v1.5, which is the same algorithm as the `DEFAULT` setting. Steeltoe.Configuration.Encryption version 4.2.0 patches the issue.