https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:29:58.817929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-43401 cnvd-2019-43401 2026-10-03T09:29:58.868521+00:00 cnvd-2019-43401 https://cve.radiocsirt.org/vuln/euvd-2026-65846 EUVD-2026-65846 2026-10-03T09:29:58.868561+00:00 EUVD-2026-65846 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12541 fkie_cve-2018-12541 2026-10-03T09:29:58.868576+00:00

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.

 https://cve.radiocsirt.org/vuln/ghsa-45xm-v8gq-7jqx GHSA-45xm-v8gq-7jqx — Excessive memory allocation 2026-10-03T09:29:58.868606+00:00

Affected: Maven: io.vertx:vertx-core

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.

 https://cve.radiocsirt.org/vuln/gsd-2018-12541 gsd-2018-12541 2026-10-03T09:29:58.868629+00:00 gsd-2018-12541 https://cve.radiocsirt.org/vuln/rhsa-2018:2946 RHSA-2018:2946 — Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update 2026-10-03T09:29:58.868641+00:00

vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake vertx: API Validation XML Schemas do not forbid file system access