Skip to content

CVE record · 1 source

CVE-2026-118488

CVSS 5.9

In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated line (not…

Vendor: Eclipse Foundation
Product: Eclipse Vert.x
CVSS v3.1: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 8h ago

In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated line (not…

In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated line (not length-prefixed, for example a simple string [1]), we'll keep growing the buffer without…

CVSS 5.9 CVE-2026-118488 Eclipse Foundation