{"action":"Upgrade com.linecorp.centraldogma:centraldogma-server-mirror-git to 0.84.0 or later.","affected":[{"fixed":"0.84.0","introduced":"0"}],"component":"com.linecorp.centraldogma:centraldogma-server-mirror-git","cve_ids":["CVE-2026-11745"],"ecosystem":"Maven","epss":0.00219,"exploited":false,"fixed_versions":["0.84.0"],"ghsa_id":"GHSA-vjfw-cpmh-xwv3","id":"tcs_01M5N9E6NKX0HJW9XYB3JY2S11","modified_at":"2026-09-11T21:00:06.354959044Z","published_at":"2026-09-11T20:45:50Z","references":["https://osv.dev/vulnerability/GHSA-vjfw-cpmh-xwv3","https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3","https://nvd.nist.gov/vuln/detail/CVE-2026-11745","https://github.com/line/centraldogma"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vjfw-cpmh-xwv3","url":"https://osv.dev/vulnerability/GHSA-vjfw-cpmh-xwv3"},{"source":"nvd","source_id":"CVE-2026-11745","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11745"}],"summary":"Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)"}