https://vulnerability.circl.lu/sightings/feed 2026-10-20T14:29:20.731121+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2c31ccd9-7a86-48af-9f5e-9e7269676bb6/export 2026-10-20T14:29:20.762865+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2c31ccd9-7a86-48af-9f5e-9e7269676bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102465", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443770850482997", "content": "CVE-2026-102465 In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle position, can send a crafted RESP response declaring an extremely large array, push, or attribute length, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Vert.x event loop thread, denying service to all connections and verticles sharing that loop.\nThe impacted component is io.vertx:vertx-mysql-client.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102465https://github.com/vert-x3/vertx-redis-client/security/advisories/GHSA-4wf9-p5hg-98w5https://gitlab.eclipse.org/security/cve-assignment/-/work_items/343#eclipse #EclipseFoundation #EclipseVert.x#CVE_2026_102465#bot", "creation_timestamp": "2026-10-15T07:35:26.677190Z"} 2026-10-15T07:35:26.677190+00:00