{"action":"Upgrade com.linecorp.centraldogma:centraldogma-server-auth-saml to 0.64.3 or later.","affected":[{"fixed":"0.64.3","introduced":"0"}],"component":"com.linecorp.centraldogma:centraldogma-server-auth-saml","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["0.64.3"],"ghsa_id":"GHSA-hx5q-v6pj-533r","id":"tcs_01M5N91KA9X90WTQPS05FWAP60","modified_at":"2024-12-04T05:34:32.965572Z","published_at":"2024-02-26T20:04:50Z","references":["https://osv.dev/vulnerability/GHSA-hx5q-v6pj-533r","https://github.com/line/armeria/security/advisories/GHSA-4m6j-23p2-8c54","https://github.com/line/centraldogma/security/advisories/GHSA-hx5q-v6pj-533r","https://github.com/line/centraldogma/commit/16903426be2e954c050b3ee47b8c38ee3218f0eb","https://github.com/line/centraldogma/commit/16903426be2e954c050b3ee47b8c38ee3218f0ebxz","https://github.com/line/centraldogma","https://github.com/line/centraldogma/releases/tag/centraldogma-0.64.3"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-hx5q-v6pj-533r","url":"https://osv.dev/vulnerability/GHSA-hx5q-v6pj-533r"}],"summary":"SAML authentication bypass due to missing validation on unsigned SAML messages"}