Vulnerabilidades do LY Corporation Armeria
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam LY Corporation Armeria: 2 registro(s), com versões afetadas e correções.
CVE-2026-11751
Crítica · 9.1
18/08/2026
A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS…
A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections.
CVE-2026-11752
Média · 5.9
19/06/2026
A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where…
A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-trusted xDS control plane to read arbitrary local files and environment variables on the xDS client host.