Red Hat build of Eclipse Vert.x
Eclipse Vert.x contains several different components designed to make it easier for you to write reactive applications. Vert.x is highly modular and you just use the bits that you need and nothing more.
Browse the latest documentation
Latest security advisories
| Severity | Advisory/CVE | Synopsis | Date |
|---|---|---|---|
| Severity MODERATE | Advisory/CVECVE-2022-41881 | Synopsis A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service (DoS). | Date |
| Severity MODERATE | Advisory/CVECVE-2022-42004 | Synopsis A flaw was found In FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion due to the lack of a check in BeanDeserializer._deserializeFromArray to prevent the use of deeply nested arrays. An application is only vulnerable with certain customized choices for deserialization. | Date |
| Severity MODERATE | Advisory/CVECVE-2022-42003 | Synopsis A flaw was found in FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled due to unchecked primitive value deserializers to avoid deep wrapper array nesting. | Date |
| Severity MODERATE | Advisory/CVECVE-2022-25647 | Synopsis A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes. This issue may lead to availability attacks. | Date |
| Severity MODERATE | Advisory/CVECVE-2021-21295 | Synopsis In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. | Date |
Top resources
Knowledgebase
Access articles and solutions to find answers to your questions.
Lifecycle
View the various levels of maintenance for each release of a product over a period from initial release to the end of maintenance.
Component details
Self-solve an issue or learn more about issues, environments, and resolutions.
Red Hat build of Eclipse Vert.x Supported Configurations
Every Red Hat build of Eclipse Vert.x release is tested with the most recent Red Hat OpenShift Container Platform and Red Hat Enterprise Linux release.
Get support
Support cases
Get answers quickly by opening a support case with us.
Live chat
Directly access our support engineers during weekday business hours.
Call or email
Speak directly with a Red Hat Support expert by phone or through email.
