Lucene search
+L

81 matches found

vulnersOsv
vulnersOsv
•added 2026/10/15 9:38 a.m.•17 views

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +8905 more potentially affected by CVE-2026-102467 via io.vertx:vertx-core (>=4.0.0, <=4.5.34)

io.vertx:vertx-core MAVEN version =4.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0
EUVD
EUVD
•added 2026/10/15 7:19 a.m.•25 views

EUVD-2026-101929

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/15 7:19 a.m.•22 views

CVE-2026-102467

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/15 7:19 a.m.•53 views

CVE-2026-102467

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS0.00258EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/15 7:19 a.m.•53 views

CVE-2026-102467

The io.vertx:vertx-core component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] contains a vulnerability in its WebSocket implementation . The root cause is a failure to define a maximum number of bytes allocation when decompressing frames or mess...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
•added 2026/10/15 7:19 a.m.•15 views

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +8905 more potentially affected by CVE-2026-102467 via io.vertx:vertx-core (>=4.0.0, <=4.5.34)

io.vertx:vertx-core MAVEN version =4.0.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/10/15 7:19 a.m.•18 views

CVE-2026-102467

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/15 7:19 a.m.•17 views

CVE-2026-102467

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•21 views

PT-2026-114824

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•14 views

CVE-2026-102467: Allocation of Resources Without Limits or Throttling

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is...

8.7CVSS5.8AI score0.00258EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/14 7:17 p.m.•21 views

CVE-2026-102479

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as...

8.7CVSS0.00335EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/14 6:43 p.m.•22 views

EUVD-2026-101557

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as...

8.7CVSS5.7AI score0.00335EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/14 6:43 p.m.•19 views

CVE-2026-102479

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as...

8.7CVSS5.7AI score0.00335EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/14 6:43 p.m.•48 views

CVE-2026-102479

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as...

8.7CVSS0.00335EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/14 6:43 p.m.•15 views

CVE-2026-102479

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as...

8.7CVSS5.7AI score0.00335EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/14 6:43 p.m.•108 views

CVE-2026-102479

The io.vertx:vertx-core component in Eclipse Vert.x versions [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , or [5.2.0, 5.2.0] contains a vulnerability in the HTTP/1.x decoder . The root cause is an improper canonicalization process for well-known HTTP headers, which allows crafted headers (e.g., Content-Xeng...

8.7CVSS5.7AI score0.00335EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/10/14 6:11 p.m.•21 views

EUVD-2026-101530

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and...

9.1CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/14 6:11 p.m.•43 views

CVE-2026-102476

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and...

9.1CVSS0.00226EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/14 6:11 p.m.•15 views

CVE-2026-102476

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and...

9.1CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/14 6:11 p.m.•18 views

CVE-2026-102476

In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and...

9.1CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Rows per page
Query Builder