CVE-2026-112331 Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting require...

CVE-2026-112331

Motor.NET versions prior to 0.19.0 are vulnerable to a Denial of Service (DoS) attack due to improper handling of structured CloudEvent mappings. An attacker capable of producing records to a consumed topic can trigger a permanent crash-loop by sending a single crafted record with a content-type ...

CVE-2026-50196

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0 and 3.4.0, "DataCenterInfo.FromJson" throws "ArgumentException" for any "name" value other than ""MyOwn"" or ""Amazon""...

CVE-2026-50196: Improper Input Validation

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0 and 3.4.0, DataCenterInfo.FromJson throws ArgumentException for any name value other than "MyOwn" or "Amazon", despite...