Skip to content
OpenAdvisories

Product · LY

Armeria

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-121821

    A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not en…

    LY Armeria
  • Medium 5.9
    CVE-2026-121819

    A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filena…

    LY Armeria
  • Medium 5.1
    CVE-2026-11753

    A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is r…

    LY Armeria
  • Medium 5.9
    CVE-2026-11752

    Armeria: External Control of File Name or Path in xDS SDS DataSource

    A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-trusted xDS …

    LY Armeria com.linecorp.armeria:armeria-xds Maven