{"id":"CVE-2026-11753","published":"2026-11-04T06:17:03.997","lastModified":"2026-11-04T06:17:03.997","description":"A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-controlled URL.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/line/armeria/security/advisories/GHSA-89cp-657f-wp7v","tags":[]},{"url":"https://line.github.io/security-advisory-blog/CVE-2026-11753/","tags":[]}],"exploitRefs":[{"url":"https://github.com/line/armeria/security/advisories/GHSA-89cp-657f-wp7v","tags":[]}],"hasPoc":true,"ai":null}