Login Request a demo
VE
Product
Vert.x
by Eclipse · last CVE Oct 15, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 3High 5Medium 19Low 0
Severity
All severities27Critical3High5Medium19Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vert.x to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-12540
8.8
2%
Jul 12
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter
Affected: 3.0.0 through 3.5.2
CVE-2026-15075
7.5
0%
Jul 14
In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across…
Affected: through 4.5.29; 5.0.0 through 5.1.4
CVE-2026-15076
7.5
0%
Jul 14
In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute…
Affected: 4.0.0 through 4.5.29; 5.0.0 through 5.1.4
CVE-2025-11965
7.5
1%
Oct 22
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories,…
Affected: 4.0.0 before 4.5.22; 5.0.0 before 5.0.5
CVE-2024-8391
7.5
1%
Sep 4
Eclipse Vert.x gRPC server does not limit the maximum message size
Affected: 4.3.0 before 4.5.10
Showing 5