MEDIUM 5.1 NVD
CVE-2026-11753
A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header af
A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-controlled URL.
References
- https://github.com/line/armeria/security/advisories/GHSA-89cp-657f-wp7v
- https://line.github.io/security-advisory-blog/CVE-2026-11753/
This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-11-04 via NVD.
vulnfeed aggregates 18348 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.