{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/motor.net-before-0.19.0--0.19.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-112330"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Motor.NET before 0.19.0 (\u003c 0.19.0)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eMotor.NET before 0.19.0 contains a denial of service vulnerability. A remote attacker who can publish to a consumed queue can crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single double-quote header value, or an unparsable typed attribute such as cloudEvents:time to trigger an unhandled exception in ExtractCloudEvent that is treated as fatal. This results in the application stopping and the unacknowledged message being redelivered on restart, causing a permanent crash-loop.\u003c/p\u003e\n","date_modified":"2026-10-22T22:30:50Z","date_published":"2026-10-22T22:30:50Z","id":"https://feed.craftedsignal.io/briefs/2026-10-motor-net-dos/","summary":"Motor.NET versions before 0.19.0 contain a denial of service vulnerability where crafted cloudEvents headers trigger a fatal exception in ExtractCloudEvent, causing a permanent crash-loop upon message redelivery.","title":"Motor.NET: Denial of Service via crafted cloudEvents headers (CVE-2026-112330)","url":"https://feed.craftedsignal.io/briefs/2026-10-motor-net-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Motor.NET Before 0.19.0 (\u003c 0.19.0)","version":"https://jsonfeed.org/version/1.1"}