CVE-2026-102461
- Source
- https://cve.org/CVERecord?id=CVE-2026-102461
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102461.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-102461
- Aliases
-
- GHSA-4m87-8qfr-8p8m
- Published
- 2026-10-15T08:23:54Z
- Modified
- 2026-10-28T02:30:26Z
- Severity
-
- 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes disproportionate CPU time, leading to denial of service.
The impacted component is io.vertx:vertx-json-schema.
The following Vert.x modules depend on vertx-json-schema and are also affected:
io.vertx:vertx-web-openapi-router io.vertx:vertx-web-validation io.vertx:vertx-openapi
- Database specific
{ "cna_assigner": "eclipse", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102461.json" }- References
Affected packages
Git / github.com/eclipse-vertx/vert.x
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vert.x
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vertx-json-schema
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "4.0.0" }, { "last_affected": "4.5.34" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.0.0" }, { "last_affected": "5.0.12" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.1.0" }, { "last_affected": "5.1.9" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] }
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vertx-sql-client
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
- Type
- GIT
- Repo
- https://github.com/vert-x3/vertx-web
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
Affected versions
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.1.0
4.1.0.Beta1
4.1.0.CR1
4.1.0.CR2
4.1.1
4.2.0
4.2.0.Beta1
4.2.0.CR1
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.5.0
4.5.1
4.5.10
4.5.11
4.5.12
4.5.13
4.5.14
4.5.15
4.5.16
4.5.17
4.5.18
4.5.19
4.5.2
4.5.20
4.5.21
4.5.22
4.5.23
4.5.24
4.5.25
4.5.26
4.5.27
4.5.28
4.5.29
4.5.3
4.5.30
4.5.31
4.5.32
4.5.33
4.5.34
4.5.4
4.5.5
4.5.6
4.5.7
4.5.8
4.5.9
5.*
5.0.0
5.0.1
5.0.10
5.0.11
5.0.12
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.1.8
5.2.0