CVE-2026-102461
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(nĀ²) pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes disproportionate CPU time, leading to denial of service. The impacted component is io.vertx:vertx-json-schema. The following Vert.x modules depend on vertx-json-schema and are also affected: io.vertx:vertx-web-openapi-router io.vertx:vertx-web-validation io.vertx:vertx-openapi
| Vendor | eclipse foundation |
| Product | eclipse vert.x |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse vert.x
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse vert.x are published ā delivered to Slack, Telegram or Discord.
Get Free Alerts ā
Free Ā· No credit card Ā· 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse Vert.x
4.0.0 ā¤ 4.5.34 5.0.0 ā¤ 5.0.12 5.1.0 ā¤ 5.1.9 5.2.0
References
Credits
Mike Read