Denial of Service Vulnerability in Eclipse Vert.x JSON Schema Component

CVE-2026-102461

What is CVE-2026-102461?

In certain versions of Eclipse Vert.x, a vulnerability has been identified within the uniqueItems keyword validation of the vertx-json-schema component. This flaw arises due to an inefficient O(n²) pairwise comparison loop that lacks short-circuiting and size limitations. By sending a carefully crafted JSON array, an unauthenticated remote attacker could exploit this vulnerability, resulting in excessive CPU consumption and potentially leading to a denial of service condition.

References