CVE-2026-81515
1 advisory.
NuGet/Steeltoe.Discovery.Eureka CVE-2026-81515: high 7.5, EPSS 0.61%
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
Action: Upgrade Steeltoe.Discovery.Eureka to 4.3.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.3.0 | - |
Fixed versions
| 4.3.0 |
Sources
- osv: GHSA-hr73-3gpv-hh6q
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-hr73-3gpv-hh6q
- https://nvd.nist.gov/vuln/detail/CVE-2026-81515
- https://github.com/SteeltoeOSS/Steeltoe/commit/bc1c3763aacc1fee82ef9932f338ec08dcb00432
- https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
- https://github.com/SteeltoeOSS/security-advisories
- https://github.com/advisories/GHSA-j8ph-6fxj-g533
CVE-2026-81515 · published · modified · JSON