Maven/com.linecorp.centraldogma:centraldogma-server-auth-shiro CVE-2026-11748: medium 6.9, EPSS 0.48%
Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion
Action: Upgrade com.linecorp.centraldogma:centraldogma-server-auth-shiro to 0.84.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.84.0 | - |
Fixed versions
| 0.84.0 |
Sources
- osv: GHSA-98q5-5qh2-7w75
- nvd: CVE-2026-11748
- https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75
- https://github.com/line/centraldogma
CVE-2026-11748 · published · modified · JSON