{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/motor.net--0.19.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-112332"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Motor.NET (\u003c 0.19.0)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eMotor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize. A remote attacker who can publish to a consumed queue or topic can crash the service permanently by sending structurally valid JSON that does not match the handler's expected type. The failure to catch JsonSerializationException causes TypedConsumerService.SingleMessageConsumeAsync to call StopApplication; the resulting redelivery of the unacknowledged message on restart leads to a permanent crash-loop.\u003c/p\u003e\n","date_modified":"2026-10-22T22:30:58Z","date_published":"2026-10-22T22:30:58Z","id":"https://feed.craftedsignal.io/briefs/2026-10-motor-net-deserialization-dos/","summary":"Motor.NET versions before 0.19.0 contain an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that can cause a permanent crash-loop.","title":"Motor.NET: Denial of service via JsonNetDeserializer exception handling (CVE-2026-112332)","url":"https://feed.craftedsignal.io/briefs/2026-10-motor-net-deserialization-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Motor.NET (\u003c 0.19.0)","version":"https://jsonfeed.org/version/1.1"}