Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Machine-written summary

Summary written by Claude Haiku from the source advisory. Not reviewed by a person.

Maven package com.epam.reportportal:service-api versions before 5.10.0 are vulnerable to a denial of service. An attacker who can create a launch with recursively nested test elements can push the test item path past the indexing limit of the ltree field type, which leaves the database unstable and largely halts reporting. Upgrade to version 5.10.0 or later, which limits the number of nested elements. The source says that deleting data with long paths and reindexing the affected indexes restores stability, though the source does not state what level of access an attacker needs.

Written 2 Nov 2026.