{"affected":[{"defaultStatus":"unaffected","product":"Armeria","source":"CNA: LY-Corporation","vendor":"LY Corporation","versions":[{"lessThan":"1.43.0","status":"affected","version":"0.80.0","versionType":"custom"}]}],"cveId":"CVE-2026-121822","cwes":["CWE-79"],"description":"A vulnerability has been identified in armeria versions 0.80.0 through 1.42.0, where attackers who control file names can cause stored cross-site scripting (XSS) when directory listing is enabled and a user views the listing.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":2.4,"severity":"low","source":"CNA: LY-Corporation","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","version":"4.0"}],"modifiedAt":1793951213527,"publishedAt":1793951213527,"references":[{"source":"CNA: LY-Corporation","tags":[],"url":"https://line.github.io/security-advisory-blog/CVE-2026-121822/"},{"source":"CNA: LY-Corporation","tags":[],"url":"https://github.com/line/armeria/security/advisories/GHSA-x9vf-hjgg-cq25"}],"remediation":[],"revision":"6408ad664ea055524e3761fe15277266b8f32e196c0153e464b218346dd99e5b","sources":[{"modifiedAt":1793951213527,"name":"CNA: LY-Corporation","retrievedAt":1793952541036,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121822"}],"ssvc":null,"status":"published","title":"CVE-2026-121822","updatedAt":1793952541036}