CVE-2026-102467
- Source
- https://cve.org/CVERecord?id=CVE-2026-102467
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102467.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-102467
- Aliases
-
- GHSA-h722-h6c2-6j3c
- Published
- 2026-10-15T07:19:57Z
- Modified
- 2026-10-17T02:47:50Z
- Severity
-
- 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb.
The impacted component is io.vertx:vertx-core.
- Database specific
{ "cna_assigner": "eclipse", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102467.json" }- References
Affected packages
Git / github.com/eclipse-vertx/vert.x
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vert.x
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "4.0.0" }, { "last_affected": "4.5.34" }, { "introduced": "5.0.0" }, { "last_affected": "5.0.12" }, { "introduced": "5.1.0" }, { "last_affected": "5.1.9" }, { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "AFFECTED_FIELD" }
Affected versions
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.1.0
4.1.0.Beta1
4.1.0.CR1
4.1.0.CR2
4.1.1
4.2.0
4.2.0.Beta1
4.2.0.CR1
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.5.0
4.5.1
4.5.10
4.5.11
4.5.12
4.5.13
4.5.14
4.5.15
4.5.16
4.5.17
4.5.18
4.5.19
4.5.2
4.5.20
4.5.21
4.5.22
4.5.23
4.5.24
4.5.25
4.5.26
4.5.27
4.5.28
4.5.29
4.5.3
4.5.30
4.5.31
4.5.32
4.5.33
4.5.34
4.5.4
4.5.5
4.5.6
4.5.7
4.5.8
4.5.9
5.*
5.0.0
5.0.1
5.0.10
5.0.11
5.0.12
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.2.0