{"action":"Upgrade Steeltoe.Discovery.Eureka to 4.3.0 or later.","affected":[{"fixed":"4.3.0","introduced":"4.0.0"}],"component":"Steeltoe.Discovery.Eureka","cve_ids":["CVE-2026-81515"],"ecosystem":"NuGet","epss":0.00609,"exploited":false,"fixed_versions":["4.3.0"],"ghsa_id":"GHSA-hr73-3gpv-hh6q","id":"tcs_01M5N8RC8QV0GNA4K0NGXBBYP3","modified_at":"2026-09-17T20:45:05.174600652Z","published_at":"2026-09-17T20:30:45Z","references":["https://osv.dev/vulnerability/GHSA-hr73-3gpv-hh6q","https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-hr73-3gpv-hh6q","https://nvd.nist.gov/vuln/detail/CVE-2026-81515","https://github.com/SteeltoeOSS/Steeltoe/commit/bc1c3763aacc1fee82ef9932f338ec08dcb00432","https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0","https://github.com/SteeltoeOSS/security-advisories","https://github.com/advisories/GHSA-j8ph-6fxj-g533"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hr73-3gpv-hh6q","url":"https://osv.dev/vulnerability/GHSA-hr73-3gpv-hh6q"}],"summary":"Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)"}