CVE-2026-11752
1 advisory.
Maven/com.linecorp.armeria:armeria-xds CVE-2026-11752: medium
Armeria: External Control of File Name or Path in xDS SDS DataSource
Action: Upgrade com.linecorp.armeria:armeria-xds to 1.40.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.40.0 | - |
Fixed versions
| 1.40.0 |
Sources
- osv: GHSA-hgw6-8c77-v4gq
- https://github.com/line/armeria/security/advisories/GHSA-hgw6-8c77-v4gq
- https://nvd.nist.gov/vuln/detail/CVE-2026-11752
- https://github.com/line/armeria
- https://github.com/line/armeria/security/advisories/xds/src/main/java/com/linecorp/armeria/xds/DataSourceStream.java
CVE-2026-11752 · published · modified · JSON