Threats affecting pkg:nuget/steeltoe.discovery.eureka

Steeltoe.Discovery.Eureka versions prior to 3.4.0 and 4.2.0 improperly handle the DataCenterInfo.FromJson method by throwing an exception for the valid 'Netflix' data center name, which is defined in the Java Eureka specification. This causes the local service registry to become permanently empty or stale due to swallowed exceptions during cache refresh. The issue is patched in versions 3.4.0 and 4.2.0. If upgrading immediately is not possible, removing unsupported DataCenterInfo.name values from the registry is recommended.