cc.openxiot:resty (>=0.0.1, <=0.0.23), com.hexagonkt:rest_tools (3.4.7) +7 more potentially affected by CVE-2026-102461 via io.vertx:vertx-openapi (>=4.4.0, <=4.5.34)

io.vertx:vertx-openapi MAVEN version =4.4.0, =0.0.1, =0.20.0, =0.20.0, =3.20.1, =3.20.1, =4.4.0, =4.4.0, =4.4.0, =4.5.34 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

ai.tock:bot-test (>=25.9.0, <=26.3.4), ai.tock:bot-test-base (>=25.9.0, <=26.3.4) +910 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=5.0.0, <=5.1.8)

io.vertx:vertx-web MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.4 and more Source cves: CVE-2026-102460 Source advisory: SNYK:JAVA-IOVERTX-20954497...

ai.tock:bot-test (26.9.0), ai.tock:bot-test-base (26.9.0) +101 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (5.2.0)

io.vertx:vertx-web MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 26.9.0 - ai.tock:bot-test-base 26.9.0 - ai.tock:bot-toolkit 26.9.0 - ai.tock:bot-toolkit-base 26.9.0 -...

Incorrect Authorization

Overview io.vertx:vertx-web is a HTTP web applications for Vert.x. Affected versions of this package are vulnerable to Incorrect Authorization in the postAuthentication method of ChainAuthHandler, which depends on internal state set only during the authenticate phase, so when a preceding handler...

EUVD-2026-101605

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when used with scope-requiring authentication handlers such as JWTAuthHandler or OAuth2AuthHandler. When a user is already...

ai.tock:bot-test (>=26.3.3, <=26.3.4), ai.tock:bot-test-base (>=26.3.3, <=26.3.4) +603 more potentially affected by CVE-2026-102460 via io.vertx:vertx-web (>=5.1.0, <=5.1.8)

io.vertx:vertx-web MAVEN version =5.1.0, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.3, =26.3.4 and more Source cves: CVE-2026-102460 Source advisory: MEND:CVE-2026-102460...

PT-2026-113937

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 4.0.0 through 4.5.34 Eclipse Vert.x versions 5.0.0 through 5.0.12 Eclipse Vert.x versions 5.1.0 through 5.1.9 Eclipse Vert.x version 5.2.0 Description A scope bypass exists in the ChainAuthHandler of Eclipse Vert.x Web...

ai.agentican:agentican-quarkus-store-rest (>=0.1.0-alpha.3, <=0.1.0-alpha.4), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0) +2272 more potentially affected by CVE-2026-15076 via io.vertx:vertx-web-client (>=4.0.0, <=4.5.29)

io.vertx:vertx-web-client MAVEN version =4.0.0, =0.1.0-alpha.3, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.4, =0.3.0, =0.3.0, =0.3.0, =0.3.1 and more Source cves: CVE-2026-15076 Source advisory: MEND:CVE-2026-15076...

ai.tock:bot-test (>=25.9.0, <=25.10.6), ai.tock:bot-test-base (>=25.9.0, <=25.10.6) +95 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (>=5.0.0, <=5.0.4)

io.vertx:vertx-web MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-11966 Source advisory: OSV:GHSA-45P5-V273-3QQR...

ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:service_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4529 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (>=4.0.0.beta1, <=4.5.21)

io.vertx:vertx-web MAVEN version =4.0.0.beta1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38,...

com.cyngn.vertx:vertx-util (>=0.5.0, <=0.5.10), com.github.advantageous:qbit-admin (>=0.9.1-rc1, <=0.9.1-rc10) +26 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.0.0)

io.vertx:vertx-web MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - com.cyngn.vertx:vertx-util =0.5.0, =0.9.1-rc1, =0.9.1-rc1, =0.9.1-rc1, =0.9.1-rc5, =0.9.1-rc3, =0.9.1-rc1, =0.9.1-rc1,...

cn.vertxup:vertx-co (>=0.4.6, <=0.4.7.1), cn.vertxup:vertx-import (>=0.4.6, <=0.4.7.1) +158 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.5.1)

io.vertx:vertx-web MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - cn.vertxup:vertx-co =0.4.6, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =0.3.0, =1.0.1, =1.0.1, =1.0.1, =1.0.3, =1.0.1, =1.0.1, =1.0.3,...

io.vertx:vertx-circuit-breaker-scala_2.12 (3.5.2.cr1), io.vertx:vertx-dropwizard-metrics-scala_2.12 (3.5.2.cr1) +24 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.5.2.cr1)

io.vertx:vertx-web MAVEN version 3.5.2.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - io.vertx:vertx-circuit-breaker-scala2.12 3.5.2.cr1 - io.vertx:vertx-dropwizard-metrics-scala2.12 3.5.2.cr1 -...

io.vertx:vertx-circuit-breaker-scala_2.12 (3.5.2.cr2), io.vertx:vertx-dropwizard-metrics-scala_2.12 (3.5.2.cr2) +24 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.5.2.cr2)

io.vertx:vertx-web MAVEN version 3.5.2.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - io.vertx:vertx-circuit-breaker-scala2.12 3.5.2.cr2 - io.vertx:vertx-dropwizard-metrics-scala2.12 3.5.2.cr2 -...

io.vertx:vertx-circuit-breaker-scala_2.12 (3.6.0.cr1), io.vertx:vertx-dropwizard-metrics-scala_2.12 (3.6.0.cr1) +17 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.6.0.cr1)

io.vertx:vertx-web MAVEN version 3.6.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - io.vertx:vertx-circuit-breaker-scala2.12 3.6.0.cr1 - io.vertx:vertx-dropwizard-metrics-scala2.12 3.6.0.cr1 -...

cn.ihomeland.slides:slides (1.0.2), cn.vertxup:vertx-co (>=0.4.10, <=0.5) +162 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.7.1)

io.vertx:vertx-web MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - cn.ihomeland.slides:slides 1.0.2 - cn.vertxup:vertx-co =0.4.10, =0.4.10, =0.4.10, =0.4.10, =0.4.10, =0.4.10, =0.4.10,...

ai.tock:bot-test (19.9.1), ai.tock:bot-test-base (19.9.1) +109 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.8.2)

io.vertx:vertx-web MAVEN version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 19.9.1 - ai.tock:bot-test-base 19.9.1 - ai.tock:bot-toolkit 19.9.1 - ai.tock:bot-toolkit-base 19.9.1 -...

ai.tock:bot-test (19.9.2), ai.tock:bot-test-base (19.9.2) +256 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.8.4)

io.vertx:vertx-web MAVEN version 3.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 19.9.2 - ai.tock:bot-test-base 19.9.2 - ai.tock:bot-toolkit 19.9.2 - ai.tock:bot-toolkit-base 19.9.2 -...

ai.tock:bot-test (>=20.3.0, <=20.3.1), ai.tock:bot-test-base (>=20.3.0, <=20.3.1) +353 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.9.0)

io.vertx:vertx-web MAVEN version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0...

ai.tock:bot-test (20.9.3), ai.tock:bot-test-base (20.9.3) +1336 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (3.9.5)

io.vertx:vertx-web MAVEN version 3.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 20.9.3 - ai.tock:bot-test-base 20.9.3 - ai.tock:bot-toolkit 20.9.3 - ai.tock:bot-toolkit-base 20.9.3 -...