GHSA-89cp-657f-wp7v: Security vulnerability

Published Nov 4, 2026

Updated

A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-controlled URL.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade armeria-saml to a version that resolves this vulnerability.
Fixed in 1.41.1

Event History

Nov 4, 2026

CVE Published

via OSV·05:19 AM

Data Sourced

via OSV·05:19 AM

DescriptionSeverity

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs to control the RelayState value used in a SAML authentication flow. After the user successfully authenticates, that value can be reflected into the HTTP Location header and redirect the user to an attacker-controlled URL.

Which deployments are affected?

Deployments using armeria-saml versions earlier than 1.41.1 are affected. The provided information does not identify any configuration prerequisite beyond use of a vulnerable version and a SAML flow that accepts attacker-controlled RelayState.

What version resolves the issue?

Upgrade armeria-saml to version 1.41.1 or later. The vulnerability affects versions prior to 1.41.1.

GHSA-89cp-657f-wp7v: Security vulnerability

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments are affected?

What version resolves the issue?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments are affected?

What version resolves the issue?