armeria vulnerabilities

2 known vulnerabilities in armeria from Linecorp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Armeria: Improper Authentication

  CVE-2024-1735Feb 26, 2024LINE

  A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.

• 7.5 High severity

  armeria: Incorrect Authorization

  CVE-2023-38493Jul 25, 2023LINE

  Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria