CVE-2026-90484

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check isfullpackage, after which the parser reads the response type...

EUVD-2026-107230

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check isfullpackage, after which the parser reads the response type...

PT-2026-120570

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check is full package, after which the parser reads the response ty...

Improper handling of exceptions in Apache bRPC

Apache bRPC versions 1.11.0 and earlier contain an improper exception handling vulnerability. This vulnerability arises because the MySQL client response parser fails to check for null pointers or zero-length packets when processing them; instead, it reads the response type bytes directly, leadin...

CVE-2026-103224

A flaw was found in vertx-mysql-client. This vulnerability allows a malicious or compromised MySQL server to cause a Denial of Service DoS by crashing the client application. Because the MySQL message decoder fails to enforce a cumulative size limit when reassembling multi-packet messages, a serv...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...

CVE-2026-102466

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x MySQL client vertx-mysql-client pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-103224

The io.vertx:vertx-mysql-client component in Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash . The root cause is that the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-...

EUVD-2026-101955

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

ai.pipestream:platform-registration-service (>=0.1.7, <=0.1.23), app.cash.chronicler:chronicler-player (1.0.1) +196 more potentially affected by CVE-2026-103224 via io.vertx:vertx-mysql-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-mysql-client MAVEN version =4.0.0, =0.1.7, =4.20.0, =0.0.10, =0.0.1, =11.0.2, =11.0.2, =5.1.0, =2.0.0, =2.0.0, =2.2.2, =1.9.1-release, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2026-103224 Source advisory: MEND:CVE-2026-103224...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

com.flipkart.krystal:vajram-sql-vertx (>=11.0.0, <=11.0.1), com.flipkart.krystal:vajram-sql-vertx-codegen (>=11.0.0, <=11.0.1) +20 more potentially affected by CVE-2026-103224 via io.vertx:vertx-mysql-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-mysql-client MAVEN version =5.1.0, =11.0.0, =11.0.0, =1.11.0, =1.11.0, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =4.5.3, =7.1.0, =7.1.3 and more Source cves: CVE-2026-103224 Source advisory: MEND:CVE-2026-103224...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-102465

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle...

CVE-2026-102466

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x MySQL client vertx-mysql-client pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an...

ai.pipestream:platform-registration-service (>=0.1.7, <=0.1.23), app.cash.chronicler:chronicler-player (1.0.1) +196 more potentially affected by CVE-2026-102466 via io.vertx:vertx-mysql-client (>=4.0.0, <=4.5.34)

io.vertx:vertx-mysql-client MAVEN version =4.0.0, =0.1.7, =4.20.0, =0.0.10, =0.0.1, =11.0.2, =11.0.2, =5.1.0, =2.0.0, =2.0.0, =2.2.2, =1.9.1-release, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2026-102466 Source advisory: MEND:CVE-2026-102466...

EUVD-2026-101957

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x MySQL client vertx-mysql-client pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an...

CVE-2026-102466

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x MySQL client vertx-mysql-client pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an...