Linecorp Armeria — known CVE vulnerabilities

Every CVE whose affected-product data names Linecorp Armeria, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-1735 — CVSS 9.1 (critical): A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass…
• CVE-2021-43795 — CVSS 7.5 (high): Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond…
• CVE-2023-38493 — CVSS 7.5 (high): Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2019-16771 — CVSS 4.8 (medium): Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject…