CVE-2026-102475

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to force a server to indefinitely allocate heap. This vulnerabilit...

CVE-2026-102475

The io.vertx:vertx-http-proxy component in Eclipse Vert.x versions [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] contains a vulnerability in the HTTP proxy body transformer interceptor . The flaw exists because the interceptor relies on a max buffered bytes limit to ensure bounded buffers, ...