Armeria (Linecorp) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 226 known versions, newest CVE from 2024-02-26. Vendor: Linecorp.

CVEs of Armeria

• CVE-2024-1735 - CVSS 9.1 (critical), 2024-02-26: A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users…
• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2023-38493 - CVSS 7.5 (high), 2023-07-25: Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or…
• CVE-2021-43795 - CVSS 7.5 (high), 2021-12-02: Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted…
• CVE-2019-16771 - CVSS 6.5 (medium), 2019-12-06: Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP…