Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:eclipse:vertx:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Eclipse Vert.x: Denial of Service via vertx-stomp FrameParser (CVE-2026-118487)

The FrameParser component in vertx-stomp fails to limit record sizes, allowing an attacker to cause JVM heap exhaustion and process crashes via continuous byte streams.

Eclipse Vert.x denial-of-service memory-exhaustion java vulnerability
1t 1c
high advisory

Eclipse Vert.x: Request smuggling in HTTP/1.x decoder (CVE-2026-102479)

Eclipse Vert.x contains a request smuggling vulnerability in its HTTP/1.x decoder (CVE-2026-102479) that can be leveraged for session fixation attacks.

Vert.x +1 web-application request-smuggling cve-2026-102479 web-vulnerability data-leakage application-security
2t 2c updated