HTTP Proxy Vulnerability in Eclipse Vert.x Versions

CVE-2026-102475

What is CVE-2026-102475?

A vulnerability in the HTTP proxy of Eclipse Vert.x allows for potential heap exhaustion due to incorrect handling of a max buffered bytes limit within a body transformer interceptor. This issue may lead to a denial-of-service condition as it can cause the server to allocate heap memory indefinitely. It specifically affects versions 5.0.0, 5.0.12, 5.1.0, 5.1.9, and 5.2.0, necessitating vigilance from developers using these releases to prevent service interruptions.

References