Skip to content
OpenAdvisories

Vendor

LY

19 known vulnerabilities.

Products

Armeria 10 Central Dogma 3 "Yahoo! Shopping" App for Android 1 LINE client for Android 1 LINE client for iOS 1 LIFF SDK 1 LINE for Windows 1 'Yahoo! JAPAN' App for Android 1 'Yahoo! JAPAN' App for iOS 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-121821

    A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not en…

    LY Armeria
  • Medium 5.9
    CVE-2026-121819

    A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filena…

    LY Armeria
  • Medium 5.1
    CVE-2026-11753

    A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is r…

    LY Armeria
  • Medium 5.1
    CVE-2026-112148

    A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting …

    LY LIFF SDK
  • Medium 6.9
    CVE-2026-11748

    Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

    A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter without neutralizing LDAP filter metacharacters, allowing an un…

    LY Central Dogma com.linecorp.centraldogma:centraldogma-server-auth-shiro Maven
  • Medium 5.9
    CVE-2026-11752

    Armeria: External Control of File Name or Path in xDS SDS DataSource

    A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-trusted xDS …

    LY Armeria com.linecorp.armeria:armeria-xds Maven
  • Medium 6.5
    CVE-2026-3861

    LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web…

    LY LINE client for iOS iOS
  • Medium 4.3
    CVE-2025-41408

    Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14…

    LY "Yahoo! Shopping" App for Android Android
  • Medium 6.1
    CVE-2024-28895

    'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-sit…

    LY 'Yahoo! JAPAN' App for iOS 'Yahoo! JAPAN' App for Android Android iOS