CVE-2026-112331 Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting require...

CVE-2026-112331

Motor.NET versions prior to 0.19.0 are vulnerable to a Denial of Service (DoS) attack due to improper handling of structured CloudEvent mappings. An attacker capable of producing records to a consumed topic can trigger a permanent crash-loop by sending a single crafted record with a content-type ...