Skip to contentLine Corporation vulnerabilities
Newest
- line corporation armeriaA vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation, potentially resulting in denial of service.CVE-2026-1218248.7 High
- line corporation armeriaA vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and acce…CVE-2026-1218238.7 High
- line corporation armeriaA vulnerability has been identified in armeria versions 0.80.0 through 1.42.0, where attackers who control file names can cause stored cross-site scripting (XSS) when directory listing is enabled and…CVE-2026-1218222.4 Low
- line corporation armeriaA vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions, allowing an attacker-controlled website visit…CVE-2026-1218215.3 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size befo…CVE-2026-1218208.7 High
- line corporation armeriaA vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filename containment without resolving symbolic links, allowing a compromised or semi-t…CVE-2026-1218195.9 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing…CVE-2026-117535.1 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validi…CVE-2026-117497.6 High
- line corporation armeriaA vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed u…CVE-2026-117519.1 Critical
- line corporation for windows, ly corporation line for windows +1 moreA vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0,...CVE-2026-131338.4 High
- line corporation client for android, ly corporation line client for android +1 moreA code injection vulnerability exists in the LINE Android app prior to version 26.7.2.
The...CVE-2026-168818.7 High
- line corporation central dogmaCentral Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasionCVE-2026-11748Fix available6.9 Medium
- line corporation central dogmaCentral Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeoverCVE-2026-11746Fix available9.4 Critical
- line corporation central dogmaCentral Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)CVE-2026-11745Fix available8.8 High
- line corporation armeriaArmeria: External Control of File Name or Path in xDS SDS DataSourceCVE-2026-11752Fix available5.9 Medium
- line corporation client for ios, linecorp line, ly corporation line client for ios +2 moreLINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where...CVE-2026-38617.1 High
- line corporation client for ios, linecorp line +1 moreLINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the...CVE-2025-140233.1 Low
- line corporation client for ios, linecorp line +1 moreLINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS...CVE-2025-140227.7 High
- line corporation client for ios, linecorp line +1 moreThe in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar...CVE-2025-140214.3 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in...CVE-2025-140205.4 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app...CVE-2025-140193.4 Low
- line corporation central dogmaCentral Dogma's Login Function Has an Open Redirect VulnerabilityCVE-2025-11222Fix available6.1 Medium
- line corporation client for ios, linecorp line +1 moreThe in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS)...CVE-2024-57396.1 Medium
- line corporation armeriaArmeria SAML authentication bypass due to missing validation on unsigned SAML messagesCVE-2024-1735Fix available9.1 Critical
- line corporation central dogmaCentral Dogma Authentication Bypass Vulnerability via Session LeakageCVE-2024-1143Fix available9.3 Critical
- line corporation line@ for android, line@ for ios, line line\@ +2 moreLINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in...CVE-2015-29685.9 Medium
- line, line corporation for android, for ios +2 moreLINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are...CVE-2015-08975.9 Medium
- line corporation client for ios, linecorp line +1 moreLack of TLS certificate verification in log transmission of a financial module within LINE Client...CVE-2023-55544.8 Medium
- line armeriaPaths contain matrix variables bypass decoratorsCVE-2023-38493Fix available7.5 High
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in...CVE-2022-415687.5 High
- line corporation for windows, linecorp line +1 moreDue to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to...CVE-2022-295057.8 High
- line corporation for windows, linecorp line +1 moreDue to the lack of media file checks before rendering, it was possible for an attacker to cause...CVE-2022-228205.5 Medium
- line armeriaImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeriaCVE-2021-43795Fix available7.5 High
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 11.15.0 might expose authentication information for a certain service...CVE-2021-410117.5 High
- line corporation central dogmaCentral Dogma allows privilege escalation with mirroring to the internal dogma repository that...CVE-2021-383888.8 High
- line corporation for windows, linecorp line +1 moreLINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.CVE-2021-362167.8 High
- line corporation client for ios, linecorp line +1 moreLINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address...CVE-2021-362155.3 Medium
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.CVE-2021-362146.1 Medium
- line armeriaImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in ArmeriaCVE-2019-16771Fix available4.8 Medium
- line corporation line(android), linecorp line +1 moreInteger overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows...CVE-2019-60107.8 High
- central dogma project dogma, line corporation central dogma +1 moreCross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to...CVE-2019-60026.1 Medium
- line corporation for ios, linecorp line +1 moreLINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which...CVE-2018-05185.9 Medium