Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:30 p.m.•8 views

Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

Summary Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered instance contains a field value that cannot be parsed for example, an unrecognized actionType, a non-boolean value for isCoordinatingDiscoveryServer, or a non-numeric timestamp,...

7.5CVSS5.9AI score0.00609EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2026/07/02 8:30 p.m.•33 views

Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch

Summary DataCenterInfo.FromJson throws ArgumentException for any name value other than "MyOwn" or "Amazon", despite the Java Eureka specification defining a third valid value: "Netflix". The exception propagates through the entire registry deserialization chain and is swallowed by the periodic...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder