CVE-2026-50196
1 advisory.
NuGet/Steeltoe.Discovery.Eureka CVE-2026-50196: high 7.5
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
Action: Upgrade Steeltoe.Discovery.Eureka to 3.4.0 (3.x) or 4.2.0 (4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.2.0 | - |
| 0 | 3.4.0 | - |
Fixed versions
| 4.2.0 | 3.4.0 |
Sources
- osv: GHSA-j8ph-6fxj-g533
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-j8ph-6fxj-g533
- https://nvd.nist.gov/vuln/detail/CVE-2026-50196
- https://github.com/SteeltoeOSS/Steeltoe/commit/b8ed8557bb595863e4f340051d16b26ba40a75f4
- https://github.com/SteeltoeOSS/Steeltoe/commit/c34a7399e808d0d11dd977460e81df1f2722df28
- https://github.com/SteeltoeOSS/Steeltoe
CVE-2026-50196 · published · modified · JSON