CVE-2026-121820
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 06, 2026
Vendor
unknown
Description
A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML messages without limiting the output size before signature validation, allowing an unauthenticated remote attacker to exhaust server memory and cause a denial of service.