Maven/com.linecorp.centraldogma:centraldogma-server-mirror-git CVE-2026-11745: high 8.8, EPSS 0.22%
Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)
Action: Upgrade com.linecorp.centraldogma:centraldogma-server-mirror-git to 0.84.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.84.0 | - |
Fixed versions
| 0.84.0 |
Sources
- osv: GHSA-vjfw-cpmh-xwv3
- nvd: CVE-2026-11745
- https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3
- https://github.com/line/centraldogma
CVE-2026-11745 · published · modified · JSON