LY vulnerabilities
We track 4 vulnerabilities in LY products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest LY vulnerabilities
- 7.6 High severity
Armeria: Authentication Bypass by Capture-replay
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period.
- 8.4 High severity
LINE for Windows: Uncontrolled Search Path Element
A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead o
- 9.4 Critical severity
Central Dogma: Use of Hard-coded Credentials
A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to a hard-coded, publicly known secret. This default credential
- 8.8 High severity
Central Dogma: Key Exchange without Entity Authentication
A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and c