Skip to contentLy Corporation vulnerabilities
Newest
- line corporation armeriaA vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation, potentially resulting in denial of service.CVE-2026-1218248.7 High
- line corporation armeriaA vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and acce…CVE-2026-1218238.7 High
- line corporation armeriaA vulnerability has been identified in armeria versions 0.80.0 through 1.42.0, where attackers who control file names can cause stored cross-site scripting (XSS) when directory listing is enabled and…CVE-2026-1218222.4 Low
- line corporation armeriaA vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions, allowing an attacker-controlled website visit…CVE-2026-1218215.3 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size befo…CVE-2026-1218208.7 High
- line corporation armeriaA vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filename containment without resolving symbolic links, allowing a compromised or semi-t…CVE-2026-1218195.9 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing…CVE-2026-117535.1 Medium
- line corporation armeriaA vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validi…CVE-2026-117497.6 High
- ly corporation liff sdkA vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript in the origin of an…CVE-2026-1121485.1 Medium
- line corporation armeriaA vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed u…CVE-2026-117519.1 Critical
- line corporation for windows, ly corporation line for windows +1 moreA vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0,...CVE-2026-131338.4 High
- line corporation client for android, ly corporation line client for android +1 moreA code injection vulnerability exists in the LINE Android app prior to version 26.7.2.
The...CVE-2026-168818.7 High
- line corporation central dogmaCentral Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasionCVE-2026-11748Fix available6.9 Medium
- line corporation central dogmaCentral Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeoverCVE-2026-11746Fix available9.4 Critical
- line corporation central dogmaCentral Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)CVE-2026-11745Fix available8.8 High
- line corporation armeriaArmeria: External Control of File Name or Path in xDS SDS DataSourceCVE-2026-11752Fix available5.9 Medium
- line corporation client for ios, linecorp line, ly corporation line client for ios +2 moreLINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where...CVE-2026-38617.1 High
- ly corporation "yahoo! shopping" app for androidImproper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for...CVE-2025-414085.3 Medium
- ly corporation 'yahoo! japan' app for android, 'yahoo! japan' app for ios +1 more'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109...CVE-2024-288956.1 Medium