Skip to content
OpenAdvisories

Package · NuGet

Steeltoe.Discovery.Eureka

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-81515

    Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deserializes the registry response as one unit, and an unrecognized actionType or status…

    SteeltoeOSS security-advisories Steeltoe.Discovery.Eureka NuGet
  • High 7.5
    CVE-2026-50196

    Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0 and 3.4.0, `DataCenterInfo.FromJson` throws `ArgumentException` for any `name` va…

    SteeltoeOSS Steeltoe.Discovery.Eureka Steeltoe.Discovery.Eureka NuGet
  • Medium 5.3
    CVE-2024-40636

    Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness

    Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utili…

    SteeltoeOSS security-advisories Steeltoe.Discovery.Eureka Steeltoe.Discovery.ClientAutofac NuGet