LY Corporation Armeria vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting LY Corporation Armeria: 2 record(s), with affected versions and fixes.
CVE-2026-11751
Critical · 9.1
Aug 18, 2026
A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS…
A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections.
CVE-2026-11752
Medium · 5.9
Jun 19, 2026
A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where…
A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-trusted xDS control plane to read arbitrary local files and environment variables on the xDS client host.