Skip to content
OpenAdvisories

Package · Maven

com.linecorp.centraldogma:centraldogma-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.4
    CVE-2026-11746

    Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

    A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to a hard-coded, publicly known secret. This default credentia…

    LY Central Dogma com.linecorp.centraldogma:centraldogma-server Maven
  • Critical 9.3
    CVE-2024-1143

    Central Dogma Authentication Bypass Vulnerability via Session Leakage

    Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.

    LINE Central Dogma com.linecorp.centraldogma:centraldogma-server Maven