CVE-2026-112332 is a high-severity vulnerability in Motor.NET versions before 0.19.0, allowing remote attackers to cause a permanent denial of service via JsonNet deserialization. The vulnerability exists due to an uncaught exception in JsonNetDeserializer.Deserialize, which can be exploited by sending structurally valid JSON that does not match the expected type. This issue can lead to a permanent crash- [truncated]
A denial-of-service vulnerability exists in Motor.NET before version 0.19.0. An attacker can crash the service permanently by sending a crafted record to a consumed Kafka topic with a specific content type header and missing CloudEvent attributes. This issue affects Kafka and Motor.NET deployments, requiring defenders to assess exposure and prioritize updates to prevent permanent crashes. Administrators a [truncated]
A denial of service vulnerability exists in Motor.NET before version 0.19.0. An attacker who can publish to a consumed RabbitMQ queue can cause a permanent crash by sending a message with crafted CloudEvents headers. This issue arises from the application's failure to properly handle certain CloudEvents headers, leading to an unhandled exception that crashes the service. The vulnerability is particularly [truncated]
