{"uuid": "4b08eaee-18cf-4bf8-b170-5e7153b205cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102467", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443773487910612", "content": "CVE-2026-102467  In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb.\nThe impacted component is io.vertx:vertx-core.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102467https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-h722-h6c2-6j3chttps://gitlab.eclipse.org/security/cve-assignment/-/work_items/341#eclipse #EclipseFoundation #EclipseVert.x#CVE_2026_102467#bot", "creation_timestamp": "2026-10-15T07:36:09.854050Z"}