THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-hr73-3gpv-hh6q (high) — Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

[GHSA] GHSA-hr73-3gpv-hh6q (high) — Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

medgithub_advisoriesPublished 2026-09-17

GHSA-hr73-3gpv-hh6q Severity: high CVE: CVE-2026-81515

Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

## Summary

Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered instance contains a field value that cannot be parsed (for example, an unrecognized `actionType`, a non-boolean value for `isCo

Indicators of compromise

Original source: https://github.com/advisories/GHSA-hr73-3gpv-hh6q