VYPR
← All advisories
High severityNVD Advisory· Published Oct 14, 2026

CVE-2026-102479

CVE-2026-102479

Description

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as Content-Length.

This can be exploited for request smuggling purpose.

The impacted component is io.vertx:vertx-core.

Affected products

3
  • Eclipse/vertx-corellm-create
    Range: [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0]
  • Eclipse/Vert.xllm-fuzzy2 versions
    [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0]+ 1 more
    • (no CPE)range: [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0]
    • (no CPE)range: >=5.0.0,<5.0.13,>=5.1.0,<5.1.10,>=5.2.0,<5.2.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.