THREAT OPS › Threat News › [GHSA] GHSA-67c9-f6v2-qv86 (high) — Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
[GHSA] GHSA-67c9-f6v2-qv86 (high) — Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
GHSA-67c9-f6v2-qv86 Severity: high CVE: CVE-2026-81516
Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
## Summary
Steeltoe's Consul discovery client parses the `secure` metadata field on each registered service instance using `bool.Parse`, which throws on any value other than `true` or `false`. A single service instance registered with a malformed `se
Indicators of compromise
- CVE-2026-81516cve
- CVE-2026-50196cve
Original source: https://github.com/advisories/GHSA-67c9-f6v2-qv86