Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.vertx:vertx-core

7 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 4 medium
Registry
Maven Central

Advisories 7

  • CVE-2026-6860Medium 6.9

    A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard…

    Affected: from 4.3.4, through 4.3.8; from 4.4.0, through 4.4.9; from 4.5.0, fixed in 4.5.27; from 5.0.0, fixed in 5.0.12.

  • CVE-2026-1002Medium 6.9

    Eclipse Vert.x Web static handler file access denial

    Affected: fixed in 4.5.24; from 5.0.0.CR1, fixed in 5.0.7.

  • CVE-2024-1300Medium 5.4

    Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

    Affected: from 4.3.4, fixed in 4.4.8; from 4.5.0, fixed in 4.5.3.

  • CVE-2024-1023Medium 6.5

    Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

    Affected: from 4.5.0, fixed in 4.5.2; from 4.4.5, fixed in 4.4.7.

  • In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate…

    Affected: from 3.5.0, fixed in 3.5.4.

  • In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the…

    Affected: from 3.0.0, fixed in 3.5.4.

  • In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and…

    Affected: from 3.0.0, fixed in 3.5.2.