- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 7 · 2 medium, 1 low
- Registry
- Maven Central
Advisories 7
- CVE-2025-11965Medium 6.3
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails…
Affected: fixed in 4.5.22; from 5.0.0, fixed in 5.0.5.
- CVE-2025-11966Low 2.3
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted…
Affected: fixed in 4.5.22; from 5.0.0, fixed in 5.0.5.
- CVE-2023-24815Medium 4.8
Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web
Affected: from 4.0.0, fixed in 4.3.8.
- CVE-2020-35217Unrated
Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification.
Affected: from 4.0.0-milestone1, fixed in 4.0.0-milestone5; from 4.0.0-milestone2, fixed in 4.0.0-milestone5; from 4.0.0-milestone3, fixed in 4.0.0-milestone5; from 4.0.0-milestone4, fixed in 4.0.0-milestone5.
- CVE-2019-17640Unrated
In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5…
Affected: from 3.0.0, fixed in 3.9.4.
- CVE-2018-12542Unrated
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a…
Affected: from 3.0.0, fixed in 3.5.4.
- CVE-2018-12540Unrated
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form…
Affected: from 3.0.0, fixed in 3.5.3.