polaris

Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...

CVE-2026-102461

A flaw was found in vertx-json-schema. When validating arrays configured with the uniqueItems keyword, the validation mechanism performs repetitive pairwise comparisons without an array size limit. A remote, unauthenticated attacker can exploit this vulnerability by submitting a crafted JSON arra...

Astra Linux – Vulnerability in node-ajv

The ajv Another JSON Schema Validator before version 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

cc.openxiot:resty (>=0.0.1, <=0.0.23), cc.unitmesh:connection-manager (>=0.3.3, <=0.3.4) +70 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=4.0.0, <=4.5.34)

io.vertx:vertx-json-schema MAVEN version =4.0.0, =0.0.1, =0.3.3, =v0.27.12, =2.2.9, =2.3.1, =3.0.0-b1, =3.0.0-b4, =0.1, =3.0.4, =3.3.3 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

io.strimzi:kafka-bridge (>=1.2.0-rc1, <=1.2.0), io.vertx:vertx-openapi (5.2.0) +5 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (5.2.0)

io.vertx:vertx-json-schema MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-json-schema and may be impacted: - io.strimzi:kafka-bridge =1.2.0-rc1, =1.2.0 - io.vertx:vertx-openapi 5.2.0 - io.vertx:vertx-stack-depchain...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

EUVD-2026-101933

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

dev.vertique:vertique-mcp-server (>=0.2.0, <=0.3.0), dev.vertique:vertique-rest-openapi-docs (0.3.0) +22 more potentially affected by CVE-2026-102461 via io.vertx:vertx-json-schema (>=5.1.2, <=5.1.9)

io.vertx:vertx-json-schema MAVEN version =5.1.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.4, =4.0.0, =4.0.0, =4.0.0, =4.0.2 and more Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461

Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] are vulnerable to a denial of service (DoS) attack. The root cause is located in the io.vertx:vertx-json-schema component, where the uniqueItems keyword validation employs an O(n²) pairwise comparison ...

PT-2026-114827

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-102461: Inefficient Algorithmic Complexity

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-108810

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

EUVD-2026-97283

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

CVE-2026-108810 tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...