https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 14:29:21 +0000 https://vulnerability.circl.lu/sighting/2c31ccd9-7a86-48af-9f5e-9e7269676bb6/export {"uuid": "2c31ccd9-7a86-48af-9f5e-9e7269676bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102465", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443770850482997", "content": "CVE-2026-102465 In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle position, can send a crafted RESP response declaring an extremely large array, push, or attribute length, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Vert.x event loop thread, denying service to all connections and verticles sharing that loop.\nThe impacted component is io.vertx:vertx-mysql-client.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102465https://github.com/vert-x3/vertx-redis-client/security/advisories/GHSA-4wf9-p5hg-98w5https://gitlab.eclipse.org/security/cve-assignment/-/work_items/343#eclipse #EclipseFoundation #EclipseVert.x#CVE_2026_102465#bot", "creation_timestamp": "2026-10-15T07:35:26.677190Z"} {"uuid": "2c31ccd9-7a86-48af-9f5e-9e7269676bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102465", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443770850482997", "content": "CVE-2026-102465 In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle position, can send a crafted RESP response declaring an extremely large array, push, or attribute length, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Vert.x event loop thread, denying service to all connections and verticles sharing that loop.\nThe impacted component is io.vertx:vertx-mysql-client.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102465https://github.com/vert-x3/vertx-redis-client/security/advisories/GHSA-4wf9-p5hg-98w5https://gitlab.eclipse.org/security/cve-assignment/-/work_items/343#eclipse #EclipseFoundation #EclipseVert.x#CVE_2026_102465#bot", "creation_timestamp": "2026-10-15T07:35:26.677190Z"} https://vulnerability.circl.lu/sighting/2c31ccd9-7a86-48af-9f5e-9e7269676bb6/export Thu, 15 Oct 2026 07:35:26 +0000