https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-121820/https://vulnfeed.org/cve/CVE-2026-121820/Fri, 06 Nov 2026 08:17:20 +0000A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size before signature validation, allowing an unauthenticated remote attacker to exhaust server memory and cause a denial of service.https://vulnfeed.org/cve/CVE-2026-121824/https://vulnfeed.org/cve/CVE-2026-121824/Fri, 06 Nov 2026 07:46:59 +0000A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation, potentially resulting in denial of service.https://vulnfeed.org/cve/CVE-2026-121823/https://vulnfeed.org/cve/CVE-2026-121823/Fri, 06 Nov 2026 07:46:56 +0000A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources.https://vulnfeed.org/cve/CVE-2026-11749/https://vulnfeed.org/cve/CVE-2026-11749/Wed, 04 Nov 2026 05:18:07 +0000A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period.