Skip to content
Threat Feed
Subscribe

Product

Eclipse Vert.x (4.0.0-4.5.35, 5.0.0-5.2.2)

1 brief RSS
low advisory

Eclipse Vert.x: Denial of Service via vertx-stomp FrameParser (CVE-2026-118487)

The FrameParser component in vertx-stomp fails to limit record sizes, allowing an attacker to cause JVM heap exhaustion and process crashes via continuous byte streams.

Eclipse Vert.x denial-of-service memory-exhaustion java vulnerability
1t 1c