{"action":"Upgrade Steeltoe.Discovery.Eureka to 3.4.0 (3.x) or 4.2.0 (4.x) or later.","affected":[{"fixed":"4.2.0","introduced":"4.0.0"},{"fixed":"3.4.0","introduced":"0"}],"component":"Steeltoe.Discovery.Eureka","cve_ids":["CVE-2026-50196"],"ecosystem":"NuGet","epss":0.00446,"exploited":false,"fixed_versions":["4.2.0","3.4.0"],"ghsa_id":"GHSA-j8ph-6fxj-g533","id":"tcs_01M5N8S0E712Q6VHDVPQDDBJTB","modified_at":"2026-07-02T20:56:33.416411Z","published_at":"2026-07-02T20:30:03Z","references":["https://osv.dev/vulnerability/GHSA-j8ph-6fxj-g533","https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-j8ph-6fxj-g533","https://nvd.nist.gov/vuln/detail/CVE-2026-50196","https://github.com/SteeltoeOSS/Steeltoe/commit/b8ed8557bb595863e4f340051d16b26ba40a75f4","https://github.com/SteeltoeOSS/Steeltoe/commit/c34a7399e808d0d11dd977460e81df1f2722df28","https://github.com/SteeltoeOSS/Steeltoe"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j8ph-6fxj-g533","url":"https://osv.dev/vulnerability/GHSA-j8ph-6fxj-g533"}],"summary":"Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch"}