Linecorp Armeria
5 CVEs affecting Linecorp Armeria. Latest disclosed: 2024-02-26. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1735 | Critical | 9.1 | 2024-02-26 | A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users… |
CVE-2023-44487 | High | 7.5 | 2023-10-10 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w… |
CVE-2023-38493 | High | 7.5 | 2023-07-25 | Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or… |
CVE-2021-43795 | High | 7.5 | 2021-12-02 | Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted direc… |
CVE-2019-16771 | Medium | 4.8 | 2019-12-06 | Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP heade… |