{"id":"CVE-2026-102461","published":"2026-10-15T09:17:14.887","lastModified":"2026-10-16T19:17:00.837","description":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes disproportionate CPU time, leading to denial of service.\n\n\n\nThe impacted component is io.vertx:vertx-json-schema.\n\n\n\nThe following Vert.x modules depend on vertx-json-schema and are also affected:\n\n\n\nio.vertx:vertx-web-openapi-router io.vertx:vertx-web-validation io.vertx:vertx-openapi","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-407"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eclipse-vertx/vertx-json-schema/security/advisories/GHSA-4m87-8qfr-8p8m","tags":[]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/340","tags":[]}],"exploitRefs":[{"url":"https://github.com/eclipse-vertx/vertx-json-schema/security/advisories/GHSA-4m87-8qfr-8p8m","tags":[]}],"hasPoc":true,"ai":null}