CVE-2026-102479: Request smuggling in Eclipse Vert.x HTTP/1.x decoder
// AI summary
Eclipse Vert.x HTTP/1.x decoder has CVE-2026-102479, a request smuggling flaw that can be exploited across three minor release branches of vertx-core.
// from the source
Posted by Alan Coopersmith on Oct 28 https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-ch7p-g5pm-3gqx advises: https://research.jfrog.com/post/byte-debt-vertx-header-typo-session-fixation/ explores how this can be exploited and says that vertx-core has around 2,100 Maven dependents and north of 300 million cumulative downloads, but those figures span the entire history of the project. The actual exposure window is narrow: three minor release branches shipped...