Motor.NET (< 0.19.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/motor.net--0.19.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 22:30:58 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMotor.NET: Denial of service via JsonNetDeserializer exception handling (CVE-2026-112332)https://feed.craftedsignal.io/briefs/2026-10-motor-net-deserialization-dos/Thu, 22 Oct 2026 22:30:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-motor-net-deserialization-dos/Motor.NET versions before 0.19.0 contain an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that can cause a permanent crash-loop.<p>Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize. A remote attacker who can publish to a consumed queue or topic can crash the service permanently by sending structurally valid JSON that does not match the handler's expected type. The failure to catch JsonSerializationException causes TypedConsumerService.SingleMessageConsumeAsync to call StopApplication; the resulting redelivery of the unacknowledged message on restart leads to a permanent crash-loop.</p> lowadvisory