CVE-2026-121820
2026-11-06
08h17 +00:00
08h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size before signature validation, allowing an unauthenticated remote attacker to exhaust server memory and cause a denial of service.
