io.vertx/vertx-stomp vulnerabilities

Latest io.vertx/vertx-stomp CVEs

Newest publication first

1. CVE-2023-32081 Vert.x STOMP server process client frames that would not send initially a connect frame

   Published 2023-05-12

   Medium·CVSS 6.5 EPSS 0.51%

   Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame r...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.