LY Corporation Armeria vulnerabilities and fixes
Exploited and high-severity LY Corporation Armeria vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.7CVE-2026-121820A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SFix availableLY Corporation Armeria
1 min read - 8.7CVE-2026-121824A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocatVerify fixLY Corporation Armeria
1 min read - 8.7CVE-2026-121823A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attacFix availableLY Corporation Armeria
1 min read - 7.6CVE-2026-11749A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of preFix availableLY Corporation Armeria
1 min read