4 matches found
EUVD-2026-81901
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deserializes the registry response as one unit, and an unrecognized actionType or status, a non-Boolean...
CVE-2026-81515 Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deserializes the registry response as one unit, and an unrecognized actionType or status, a non-Boolean...
PT-2026-94382
Name of the Vulnerable Software and Affected Versions Steeltoe versions 4.0.0 through 4.2.9 Description Steeltoe's EurekaDiscoveryClient deserializes the registry response as a single unit. If a registered instance contains a field value that cannot be parsed, the deserialization of the entire...
CVE-2026-81515: Improper Handling of Exceptional Conditions
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deserializes the registry response as one unit, and an unrecognized actionType or status, a non-Boolean...