Product · Eclipse Foundation

Vert.x

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 2.3

CVE-2025-11966

Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names

In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename…

Eclipse Foundation Vert.x keycloak-26.4-iamguarded-compat strimzi-kafka-operator-kafka-thirdparty-libs-cc Wolfi Maven

Oct 22, 2025