polaris

Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

Security Bulletin: Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in spring-context, logback-core and Another JSON Schema Validator. Vulnerabilities include VMware Tanzu Spring Framework could provide weaker than expected security, caused by a flaw related to disallowedFields...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...

CLEANSTART-2026-AZ51033 ajv (Another JSON Schema Validator) before 8

CVE-2025-69873 affects multiple packages. ajv Another JSON Schema Validator before 8. See references for individual vulnerability details...

CLEANSTART-2026-WL49761 ajv (Another JSON Schema Validator) before 8

Security vulnerability affects the argo-workflows package. ajv Another JSON Schema Validator before 8...

Model Context Protocol MCP Python SDK server request forgery vulnerability

Versions 1.10.0 through 1.30.0 and 2.0.0 through 2.2.0 of the Model Context Protocol MCP Python SDK contain a server-side request forgery vulnerability. This vulnerability arises because ClientSession, ClientSessionGroup, and Client invoke the default JSON schema parser to validate the outputSche...

CVE-2026-102461

A flaw was found in vertx-json-schema. When validating arrays configured with the uniqueItems keyword, the validation mechanism performs repetitive pairwise comparisons without an array size limit. A remote, unauthenticated attacker can exploit this vulnerability by submitting a crafted JSON arra...

Astra Linux – Vulnerability in node-ajv

The ajv Another JSON Schema Validator before version 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

io.strimzi:kafka-bridge (>=1.2.0-rc1, <=1.2.0), io.vertx:vertx-openapi (5.2.0) +5 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (5.2.0)

io.vertx:vertx-json-schema MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-json-schema and may be impacted: - io.strimzi:kafka-bridge =1.2.0-rc1, =1.2.0 - io.vertx:vertx-openapi 5.2.0 - io.vertx:vertx-stack-depchain...

EUVD-2026-101933

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

dev.vertique:vertique-mcp-server (>=0.2.0, <=0.3.0), dev.vertique:vertique-rest-openapi-docs (0.3.0) +22 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=5.1.2, <=5.1.9)

io.vertx:vertx-json-schema MAVEN version =5.1.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.4, =4.0.0, =4.0.0, =4.0.0, =4.0.2 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] are vulnerable to a denial of service (DoS) attack. The root cause is located in the io.vertx:vertx-json-schema component, where the uniqueItems keyword validation employs an O(n²) pairwise comparison ...

cc.openxiot:resty (>=0.0.1, <=0.0.23), cc.unitmesh:connection-manager (>=0.3.3, <=0.3.4) +71 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=4.0.0, <=4.5.34)

io.vertx:vertx-json-schema MAVEN version =4.0.0, =0.0.1, =0.3.3, =v0.27.12, =2.2.9, =2.3.1, =3.0.0-b1, =3.0.0-b4, =0.1, =3.0.4, =3.3.3 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

PT-2026-114827

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...