Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sendi…
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00627·Published 2026-10-22·Fixed in 0.19.0CWE-755
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00679·Published 2026-10-22·Fixed in 0.19.0CWE-755
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00679·Published 2026-10-22·Fixed in 0.19.0CWE-755