CVE-2026-102475

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 5.0.0 through 5.0.12 Eclipse Vert.x versions 5.1.0 through 5.1.9 Eclipse Vert.x version 5.2.0

Description The io.vertx:vertx-http-proxy component contains an issue where the HTTP proxy body transformer interceptor fails to properly enforce the max buffered bytes limit. This allows an attacker to force the server to allocate heap memory indefinitely, potentially leading to a denial of service. This issue only occurs when an intercepting body transformer is utilized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.