Threats Tagged 'ghsa-5ww7-gp4j-grqp'

CVE-2026-102461 is a high-severity vulnerability in Eclipse Vert.x affecting versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0. The issue lies in the uniqueItems keyword validation within the vertx-json-schema component, which uses an inefficient O(n²) pairwise comparison without short-circuiting or size limits. This allows a remote unauthenticated attacker to cause a denial of service by submitting a moderately-sized JSON array that consumes excessive CPU resources. Several Vert.x modules depending on vertx-json-schema are also affected. No patch information is provided, and no known exploits are reported in the wild.