CVE-2026-121820
— UNSCOREDpublic exploit availablePublished 2026-11-06 · Updated 2026-11-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size before signature validation, allowing an unauthenticated remote attacker to exhaust server memory and cause a denial of service.
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.