| CVE-2026-118487 |
In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates…
|
7.5
High
|
Nov 3, 2026 |
| CVE-2026-118488 |
In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an…
|
5.9
Medium
|
Nov 3, 2026 |
| CVE-2026-118489 |
In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users — the…
|
7.5
High
|
Nov 3, 2026 |
| CVE-2026-102477 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does…
|
8.7
High
|
Oct 15, 2026 |
| CVE-2026-102464 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102461 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword…
|
8.7
High
|
Oct 15, 2026 |
| CVE-2026-103224 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-103223 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102466 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102463 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102469 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client…
|
9.2
Critical
|
Oct 15, 2026 |
| CVE-2026-102462 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102465 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client…
|
8.2
High
|
Oct 15, 2026 |
| CVE-2026-102475 |
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer…
|
8.7
High
|
Oct 15, 2026 |
| CVE-2026-102467 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket…
|
8.7
High
|
Oct 15, 2026 |
| CVE-2026-102471 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client…
|
6.9
Medium
|
Oct 14, 2026 |
| CVE-2026-102479 |
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a…
|
8.7
High
|
Oct 14, 2026 |
| CVE-2026-102460 |
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass…
|
8.6
High
|
Oct 14, 2026 |
| CVE-2026-102476 |
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL…
|
9.1
Critical
|
Oct 14, 2026 |
| CVE-2026-15075 |
In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler…
|
8.2
High
|
Jul 14, 2026 |
| CVE-2026-15076 |
In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse…
|
8.2
High
|
Jul 14, 2026 |
| CVE-2026-6860 |
A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by…
|
6.9
Medium
|
May 6, 2026 |
| CVE-2024-8391 |
In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven…
|
6.9
Medium
|
Sep 4, 2024 |