A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attac

Summary

A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources.

Remediation

1. Inventory every LY Corporation Armeria deployment, including staging.
2. Upgrade LY Corporation Armeria to 1.43.0.
3. Confirm the running version after the upgrade.

References

• Referencehttps://line.github.io/security-advisory-blog/CVE-2026-121823/
• Referencehttps://github.com/line/armeria/security/advisories/GHSA-xqhm-4ph4-423v